topic Re: promiscuous mode and inline pair in Network Security

promiscuous mode and inline pair

alsayed — Sun, 10 Mar 2019 11:49:03 GMT

Hello

1) What's the difference between promiscuous mode and inline pair pair?

2) Where the necessary use of each mode?

3) if I have I-BANKING server located in the DMZ network, so what mode should be prefer

4)after the preferred mode then do I need to assign sensor on the outside and DMZ and the C&C in inside

Pls guide me

Re: promiscuous mode and inline pair

andrey.dugin — Thu, 05 Nov 2009 12:49:47 GMT

In promiscuous mode your sensor doesn't affect the traffic but it only listen and analyze it.

In inline mode you direct all your traffic on this network segment you want to protect to IPS and it analyze it and block some actions according to your settings.

It is the main difference. Which mode to prefer must be your decision.

Re: promiscuous mode and inline pair

Adam Frederick — Thu, 05 Nov 2009 20:33:01 GMT

with inline mode, do you actually plug the connection from the Internet in what would normally be your promiscous interface? I'm a little confused on how traffic is routed to the IPS first and then on to the firewall.

Re: promiscuous mode and inline pair

alsayed — Fri, 06 Nov 2009 12:31:01 GMT

hello

can u post me a usefull design guide with the IPS

10xs

Re: promiscuous mode and inline pair

andrey.dugin — Fri, 06 Nov 2009 12:42:18 GMT

http://www.cisco.com/go/safe