IDS MC and Internal networks

[allen.external]

Does anybody know if there is some advantage to telling the IDS MC what the internal networks are? Under configuration>TOC>Internal Networks you can tell the MC what the internal, or "trusted" network is. What is the advantge of doing this?

Thanks for any help

Justin

[sachinraja]

Hi Justin

am not really sure if there are any advantages. This is just to help the administrator or others to identify the traffic patters on sec mon. Once you define this, it will be easy to refer on the sec mon as it clearly defines where the attack is from & to. I hope this is just for identification, which might help the administrator. The IDS will not act different for these networks..

hope this helps.. all the best..

Raj