Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security ISSForum
[Top] [All Lists]

Re: [ISSForum] Proventia G in Passive Mode

Subject: Re: [ISSForum] Proventia G in Passive Mode
Date: Sat, 20 Aug 2005 11:55:04 -0400
It isn't really about voiding your warranty, you simply can't just add
or change interfaces in the G200, as it doesn't use any standard "off
the shelf" network card.
It uses a very specific card to allow the hardware failover, with custom
high-performance drivers which are designed to work only with that card.
Any other card would show up as an 'eth' interface, and will not work
with the monitoring drivers.

You may be able to solve this with some creative networking, if two of
the segments have low traffic. Remember that the G200 is only rated for
200Mbps of traffic, so if you take a 100M span port from network 1 into
port A, and then take the span ports from networks 2 and 3 and put those
into another dedicated switch, with the span port from that switch at
100M into port B, you can monitor the traffic from all three segments,
but it is a rather complex design just to get around the fact that you
have a G200, and probably should be using an A604 instead.

-Jim H


-----Original Message-----
From: issforum-bounces@iss.net [mailto:issforum-bounces@iss.net] On
Behalf Of Castaldo, Benny J
Sent: Tuesday, August 16, 2005 9:59 AM
To: 'issforum@iss.net'
Subject: [ISSForum] Proventia G in Passive Mode

I have a Proventia G 200 right now and I'm going to be using it in
passive mode.  I'm looking to monitor 3 different network segments.
Since the Proventia Gs are inline devices they obliviously have two
ports on the monitoring NIC.  Has anybody replaced it with a 3 port NIC?
Any special configurations or modifications need to be made to the
appliance to get it to work?  Thanks


_______________________________________________
ISSForum mailing list
ISSForum@iss.net

TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to 
https://atla-mm1.iss.net/mailman/listinfo/issforum

To contact the ISSForum Moderator, send email to mod-issforum@iss.net

The ISSForum mailing list is hosted and managed by Internet Security Systems, 
6303 Barfield Road, Atlanta, Georgia, USA 30328.

<Prev in Thread] Current Thread [Next in Thread>