I am actually trying to deploy the IDS within the ATM
cloud. That is... between the edge switches and the
distribution switches and/or between the distribuiton
and core.
I already am monitoring at critical ethernet hand-off
points... but there are just way to many ethernet
ports to monitor them all. That's why I was trying to
get placed somewhere that I could get all traffic
without having to tap every port.
Thanks for the response.
-Aseeker
--- PPowenski@oag.com wrote:
Are your desktops processing native cell based ATM
traffic i.e. with an
ATM NIC?
Not many companies are making them any longer I
beleive.
not many folks are doing that most use some type of
encapsulation
to/from ethernet.
If your ATM switch is doing assembly / disassembly
that ingress/egress
point would be the best point for your IDS sensor.
Otherwise keeping up with the cell assembly /
disassembly could get
quite hairy for any IDS software even if it could
perform this.
-----Original Message-----
From: Seek Knowledge [mailto:aseeker03@yahoo.com]
Sent: 30 June 2005 05:08
To: focus-ids@securityfocus.com
Subject: ATM decoding
Anyone know of good IDS/IPS products that can decode
ATM traffic? So far my list goes like this:
ISS SiteProtector does not support ATM
McAfee IntruShield does not support ATM
TippingPoint UnityOne does not support ATM
I am looking for software or hardware. I just need
to
be able to implement intrusion detection (prevention
too if possible) into an ATM network.
Thanks
-aseeker03 (CISSP)
Send instant messages to your online friends http://uk.messenger.yahoo.com
--------------------------------------------------------------------------
Test Your IDS
Is your IDS deployed correctly?
Find out quickly and easily by testing it with real-world attacks from
CORE IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708
to learn more.
--------------------------------------------------------------------------
