topic Maximum Limits and Questions in Network Security https://community.cisco.com/t5/network-security/maximum-limits-and-questions/m-p/385483#M97583 <P>Im about to start a project which could take my total sensor count well over 100, over time, using CiscoWorks VMS 2.2 UNIX Unrestricted. I am guessing that a vast increase of sensors brings along with it some unique problems. I would like to ask those of you out there that manage 100 + IDS deployments for some useful advice in overall functioning and use of the IDSMC &amp; SecMon in such an environment.</P><P></P><P>I just cant see security monitor handling 100 + sensors, with someone looking for a needle in a haystack. Granted it is better to spot things in 4.x then 3.x icons, but there is still a lot of info to go through. The only thing I could think of is to baseline the sensor to the point where barely anything minor-moderately serious shows up. Its going to be a monumental undertaking.</P><P></P><P>By the way, I know Cisco says that there is no limit of sensors you can add to the IDSMC &amp; MC, but what is the practical limit? Has anyone reached it?</P><P></P><P>Any suggestions would be appreciated.</P><P></P> Sun, 10 Mar 2019 09:11:21 GMT emusican 2019-03-10T09:11:21Z Maximum Limits and Questions https://community.cisco.com/t5/network-security/maximum-limits-and-questions/m-p/385483#M97583 <P>Im about to start a project which could take my total sensor count well over 100, over time, using CiscoWorks VMS 2.2 UNIX Unrestricted. I am guessing that a vast increase of sensors brings along with it some unique problems. I would like to ask those of you out there that manage 100 + IDS deployments for some useful advice in overall functioning and use of the IDSMC &amp; SecMon in such an environment.</P><P></P><P>I just cant see security monitor handling 100 + sensors, with someone looking for a needle in a haystack. Granted it is better to spot things in 4.x then 3.x icons, but there is still a lot of info to go through. The only thing I could think of is to baseline the sensor to the point where barely anything minor-moderately serious shows up. Its going to be a monumental undertaking.</P><P></P><P>By the way, I know Cisco says that there is no limit of sensors you can add to the IDSMC &amp; MC, but what is the practical limit? Has anyone reached it?</P><P></P><P>Any suggestions would be appreciated.</P><P></P> Sun, 10 Mar 2019 09:11:21 GMT https://community.cisco.com/t5/network-security/maximum-limits-and-questions/m-p/385483#M97583 emusican 2019-03-10T09:11:21Z Re: Maximum Limits and Questions https://community.cisco.com/t5/network-security/maximum-limits-and-questions/m-p/385484#M97584 <HTML><HEAD></HEAD><BODY><P>This is really a number of alerts per second question rather than number of sensors. A well tuned sensor should send only an alarm or two per second. So you are already on the right track.</P></BODY></HTML> Tue, 21 Dec 2004 17:16:09 GMT https://community.cisco.com/t5/network-security/maximum-limits-and-questions/m-p/385484#M97584 mchin345 2004-12-21T17:16:09Z