Solved: Cisco IDS 4.1 sensors support HA? monitor packet drops?

ben78ang · ‎09-22-2003

Hi,

can anyone tell me if Cisco IDS sensors provide High availability or failover capabilities? If yes, how and where to set?

Will there be any form of packet drop notification when sensor starts dropping packets under full load?

mkodali · ‎09-23-2003

Hi,

IDS Sensors do not provide High availability or failover capabilites.

Under high load the sensor can be configured to issue the 993 sigid alert which specifies that " The packet drop rate has exceeded the threshold". This threshold is set by default to 5% (Total packets dropped / Total packets received over a time interval). You have to enable this sig as this is disabled by default.

Hope this helps

Thanks

Madhu

View solution in original post

mkodali · ‎09-23-2003

Hi,

IDS Sensors do not provide High availability or failover capabilites.

Under high load the sensor can be configured to issue the 993 sigid alert which specifies that " The packet drop rate has exceeded the threshold". This threshold is set by default to 5% (Total packets dropped / Total packets received over a time interval). You have to enable this sig as this is disabled by default.

Hope this helps

Thanks

Madhu

mkodali · ‎09-23-2003

Hi,

IDS Sensors do not provide High availability or failover capabilites.

Under high load the sensor can be configured to issue the 993 sigid alert which specifies that " The packet drop rate has exceeded the threshold". This threshold is set by default to 5% (Total packets dropped / Total packets received over a time interval). You have to enable this sig as this is disabled by default.

Hope this helps

Thanks

Madhu