topic Re: IPS 4240 in test mode? in Network Security https://community.cisco.com/t5/network-security/ips-4240-in-test-mode/m-p/960525#M80297 <HTML><HEAD></HEAD><BODY><P>Simon -</P><P></P><P>You should set up your 4240 in promiscous mode (as opposed to in-line). Take a switch that is passing all the traffic you'd like to inspect and turn on port spanning with the monitor session commands:</P><P><A class="jive-link-custom" href="http://www.cisco.com/en/US/docs/ios/12_3t/lanswitch/command/reference/lan_m1gt.html#wp1021715" target="_blank">http://www.cisco.com/en/US/docs/ios/12_3t/lanswitch/command/reference/lan_m1gt.html#wp1021715</A></P><P>Then feed the stream into your sensor as an input only.</P><P></P><P></P></BODY></HTML> Tue, 15 Apr 2008 14:50:17 GMT rhermes 2008-04-15T14:50:17Z IPS 4240 in test mode? https://community.cisco.com/t5/network-security/ips-4240-in-test-mode/m-p/960524#M80296 <P>Is there a way to configure the IPS 4240 to monitor traffic but not to block connections? We are currently evaluating the device but would prefer it to monitor rather than block any live traffic at this stage. We have configured an event action filter for all sigs and all source/destination IPs to remove all the deny functions but does anyone have a different way of doing this?</P> Sun, 10 Mar 2019 11:03:54 GMT https://community.cisco.com/t5/network-security/ips-4240-in-test-mode/m-p/960524#M80296 simonbonner 2019-03-10T11:03:54Z Re: IPS 4240 in test mode? https://community.cisco.com/t5/network-security/ips-4240-in-test-mode/m-p/960525#M80297 <HTML><HEAD></HEAD><BODY><P>Simon -</P><P></P><P>You should set up your 4240 in promiscous mode (as opposed to in-line). Take a switch that is passing all the traffic you'd like to inspect and turn on port spanning with the monitor session commands:</P><P><A class="jive-link-custom" href="http://www.cisco.com/en/US/docs/ios/12_3t/lanswitch/command/reference/lan_m1gt.html#wp1021715" target="_blank">http://www.cisco.com/en/US/docs/ios/12_3t/lanswitch/command/reference/lan_m1gt.html#wp1021715</A></P><P>Then feed the stream into your sensor as an input only.</P><P></P><P></P></BODY></HTML> Tue, 15 Apr 2008 14:50:17 GMT https://community.cisco.com/t5/network-security/ips-4240-in-test-mode/m-p/960525#M80297 rhermes 2008-04-15T14:50:17Z