Recent content by tgboy

Any suggestions? I could really use the help. Thanks,

OK, everything was working quite fine for a while. Now I am facing another issue. I am getting a lot of packets on my IPS, mainly broadcasts and the IPS is taking a performance hit. Old Setup was VLANs 1,2,3 -> VLAN 4 Current test setup is VLANs 1,2,3 -> VLAN 4 ->IPS -> VLAN5 All systems in...

Thanks. I Tried it out and it works perfectly. I can do both monitoring and prevention of traffic. :)

What about the subnets. How should I set them? The same subnets for both VLAN 1 and VLAN 101?

The subnets of ,say, VLAN 1 and 101 , how would it be setup so I can do this? How will this setup work.

A small doubt ... The IPS can do VLAN translation. If the 3 VLANs are on the same switch, cant I connect the IPS also on to the same switch to monitor the traffic. Like making another 3 VLANs. For example the original VLANs are 1,2 and 3 and the new ones are 101,102 and 103. I can make the VLAN...

All the VLANs are assigned to single ports in the core switch. Each VLAN port is then connected to resp switches. I just need to monitor traffic inbound and outbound to 3 VLAN ports in the same core switch. The IPS supports VLAN tags and translation. I am limited to using a single port on the...

There are 10-20 VLANs created in the L3 HP switch with inter-VLAN routing. 3 server farms and the remaining are user VLANs. We need to view the traffic coming to these 3 server VLANs using an external IPS. Sorry for not having a network diagram at hand.:( Since all the VLANs are in the same...

IPS is Tipping Point 1400N and Switch HP 8200 series

Can you tell me more about the option on how can I go about using IPS and VLAN tagging option without the additional router? Just also wanted to clarify, how can I go about setting up seperate access ports for VLAN 1-3 to remove the tags leaving the core switch. Can I isolate these 3 VLANs...

Can what you suggested above be done within the same layer 3 core switch vlan 1 ------ vlan 2 ------ ------[trunk port] ---- IPS ---[trunk port] ---- ----- vlan 4, vlan 5, vlan 6 vlan 3 ------

I can only place the IPS Inline and all the VLANs are already configured (each VLAN to a single port) on the same layer 3 core switch. A newbie thought, can I configure the two groups of VLANs so that they communicate with each other over a pair of trunk ports. I can then place the IPS between...

Yeah it is IPS but will only monitor without taking any action. The VLANs are configured on a layer 3 switch. Now we need to monitor the traffic passing between one group of VLANs to another group of VLAN in the same layer 3 switch.

Hello all, I have a L3 core switch with multiple VLANs setup. Is there a way to place an IPS so as to monitor the traffic passing between, lets say, VLANS 1-3 and VLANs 4-10? Thanks in advance.

Just one more thing bout the SSH proxy, i came across FileGate SFP and Shell Control Box. Do they block malicious traffic or prevent brute force attacks? Or is it more advisable to have a host based IPS/IDS on the SFTP?