IDS Config

Hi,

If I have a IDS connected to 4500 series switch. Do I need to configure SNAP( Switched Port ANalyze) in the switch interface to which IDS is connected for sending a copy of the Packet to IDS or the IDS is it self having the capability to act in a promiscuous mode.


Thanks in Advance.

Hey,

In promiscuius Mode you want to span traffic to the port that you sensor (sniffer) is connect to (or use a hub). Once spanning is config you can preform a packet capture to the IDS and copy it via ftp.