Why not just deploy in-line, but configure for passive monitoring. In this arrangement, the unit can't block anything and will give you the functionality you want.
----------------------------------------------- Andrew Plato, CISSP President/Principal Consultant Anitian Enterprise Security ----------------------------------------------- -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jim Scharp Sent: Wednesday, December 14, 2005 7:50 PM To: [email protected] Subject: [ISSForum] Network taps for monitoring full-duplex network withProventia G2000 I am considering deploying a G2000 which will eventually go inline but will probably start in passive IDS mode. In the interim, is it possible to deploy it to passively monitor a full duplex network segment with a standard NetOptics network tap? It seems to me that it must be possible for the appliance to accept each of the two cables from the tap and perform some intelligent re-ordering and aggregation of those streams in such a way that packets avoid being dropped. Am I understanding this problem correctly and if so, is this functionality built into the appliance? Incidentally, I've looked at various aggregation taps on the market, but since they aggregate all traffic onto one wire, then they can't handle more than 1Gbps into the IDS -- whereas a full-duplex link could be up to 2Gbps max theoretical. Thanks for any insight, Jim. _______________________________________________ ISSForum mailing list [email protected] TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo/issforum To contact the ISSForum Moderator, send email to [EMAIL PROTECTED] The ISSForum mailing list is hosted and managed by Internet Security Systems, 6303 Barfield Road, Atlanta, Georgia, USA 30328. _______________________________________________ ISSForum mailing list [email protected] TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo/issforum To contact the ISSForum Moderator, send email to [EMAIL PROTECTED] The ISSForum mailing list is hosted and managed by Internet Security Systems, 6303 Barfield Road, Atlanta, Georgia, USA 30328.
