From: Christopher M. Heffner (cheffner@certified-labs.com)
Date: Fri Dec 02 2005 - 03:41:43 GMT-3
No this is not possible at this time. What you are talking about is the
process of being able to support multiple virtual sensors on a per
sensing interface. The documentation sense 4.x has stated that this
will be a future feature. I am told that virtual sensors will be
available supposedly in 6.x.
Hope this helps.
Christopher M. Heffner, CCIE 8211, CCSI 98760
Strategic Network Solutions, Inc.
VP of Internetworking Technologies
www.certified-labs.com
"Complete CCIE R&S and Security Online Rack Rentals"
-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
Tim
Sent: Thursday, December 01, 2005 6:48 PM
To: 'Security@Groupstudy. com (E-mail)'; ccielab@groupstudy.com
Subject: IDS - sensing interfaces
Hi guys,
Can the types of intrusions being monitored for be different on
different sensing interfaces on the same IDS device?
For example, let's say an IDS has 3 sensing interfaces each monitoring
different subnets.
On one subnet - the outside untrusted subnet, I want to monitor for DOS
attacks and some other things but on my inside, trusted subnets I don't
want to monitor for DOS attacks.
Is this possible? And, if so, how would I configure this?
Thanks, Tim
This archive was generated by hypermail 2.1.4 : Mon Jan 09 2006 - 07:07:50 GMT-3