topic No, the throughput wil not be in Network Security

IDSM inspection load on 100%

lumbung_artakencana — Sun, 10 Mar 2019 13:10:36 GMT

Now I have IDSM with 100% inspection load on busy hour and followed by missed packets percentage increasing at that time.

The IDSM interface is setting as promiscuous interface

Is it means my network throughput will limited by IDSM max inspection load / throughput which is 600Mbps?

Thank you

Marcel.

No, the throughput wil not be

Karsten Iwen — Fri, 28 Mar 2014 06:59:05 GMT

No, the throughput wil not be limited in the network when you are in promiscous mode. But your visibility for attacks is highly limited.

You should configure your span/capture settings on the 6k5 to only send as much traffic to the IDSM as this module can handle.

Just remember that the IDSM-2 is a ten years old system and can't catch up with the typical traffic-demand we are having nowadays. It's time to change the IDSM against an actual external sensor.

Thank you Karsten, I will

lumbung_artakencana — Fri, 28 Mar 2014 07:43:49 GMT

Thank you Karsten, I will plan to change the IDSM