[c-nsp] IPS 4240

[Mike Louis]

Did you setup a port mirror on the switch the IPS was connected to to mirror traffic to the device?

-----Original Message-----
From: cisco-nsp-bounces at puck.nether.net [mailto:cisco-nsp-bounces at puck.nether.net] On Behalf Of Ibrahim Alsharif
Sent: Tuesday, April 22, 2008 4:47 AM
To: cisco-nsp at puck.nether.net
Subject: [c-nsp] IPS 4240

hello Guys,

I have 2 IPS to install in a network those 2 IPS i should install them in promiscuous mode for testing then change their work to inline mode

according to inline mode i tried it in a lab environment and it did work fine, but in promiscuous mode i couldn't get any events on the sensor
with the knowledge that the sensor interface that is connected to the network is in sensing mode & it's promiscuous,

so please advice what to do & where should I put the IPS in my topology.

thanks,


      ____________________________________________________________________________________
Be a better friend, newshound, and
know-it-all with Yahoo! Mobile.  Try it now.  http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ
_______________________________________________
cisco-nsp mailing list  cisco-nsp at puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Note: This message and any attachments is intended solely for the use of the individual or entity to which it is addressed and may contain information that is non-public, proprietary, legally privileged, confidential, and/or exempt from disclosure.  If you are not the intended recipient, you are hereby notified that any use, dissemination, distribution, or copying of this communication is strictly prohibited.  If you have received this communication in error, please notify the original sender immediately by telephone or return email and destroy or delete this message along with any attachments immediately.