topic IDS 4215 Placement in Network Security

IDS 4215 Placement

raventura — Sun, 10 Mar 2019 09:14:08 GMT

Hello everybody, my problem is really simple, I don't know with a Router 2620 and a Firewall 515E how to plug my IDS, Do I need another switch between the Router and Firewall for this to work, is that the best way, please help.

Re: IDS 4215 Placement

sachinraja — Sun, 16 Jan 2005 09:38:41 GMT

Hello,

Are you having a cross cable between ur router and PIX as of now ?? if so, its better to put a switch on the middle, and plug your IDS there...

IDS is always placed at the traffic entering point. You will get maximum information, if you put it between the router and PIX.

Do the following:

1) the IDS sniffing interface should be put in a VLAN aalong with the router ethernet and PIX outside interfaces.

2) mirror the router's port onto the IDS port, by monitor session command.

monitor session 1 source interface fastethernet0/1 (router ethernet)

monitor session 1 destination interface fastethernet0/3 (IDS)

this is the best way of doing it.. let me know if you have any more queries..

Raj

Re: IDS 4215 Placement

raventura — Sun, 16 Jan 2005 13:24:45 GMT

Thank You so much.

Re: IDS 4215 Placement

sachinraja — Sun, 16 Jan 2005 13:40:19 GMT

Hi ,

can you please mark the case as solved, so that it might be help for others ? rate replies if found useful.

Raj