- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
03-27-2014 10:15 PM - edited 03-10-2019 06:10 AM
Now I have IDSM with 100% inspection load on busy hour and followed by missed packets percentage increasing at that time.
The IDSM interface is setting as promiscuous interface
Is it means my network throughput will limited by IDSM max inspection load / throughput which is 600Mbps?
Thank you
Marcel.
Solved! Go to Solution.
- Labels:
-
IPS and IDS
Accepted Solutions
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
03-27-2014 11:59 PM
No, the throughput wil not be limited in the network when you are in promiscous mode. But your visibility for attacks is highly limited.
You should configure your span/capture settings on the 6k5 to only send as much traffic to the IDSM as this module can handle.
Just remember that the IDSM-2 is a ten years old system and can't catch up with the typical traffic-demand we are having nowadays. It's time to change the IDSM against an actual external sensor.- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
03-27-2014 11:59 PM
No, the throughput wil not be limited in the network when you are in promiscous mode. But your visibility for attacks is highly limited.
You should configure your span/capture settings on the 6k5 to only send as much traffic to the IDSM as this module can handle.
Just remember that the IDSM-2 is a ten years old system and can't catch up with the typical traffic-demand we are having nowadays. It's time to change the IDSM against an actual external sensor.- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
03-28-2014 12:43 AM
Thank you Karsten, I will plan to change the IDSM
