October 2002
Intermediate to advanced
560 pages
12h 13m
English
The IDSM can analyze a data stream and recognize intrusions or malicious activity based on a set of attack signatures.
The IDSM can monitor up to 100 Mbps of data. If the data rate rises above that maximum, some packets will be lost and attacks could go unrecognized.
You can subscribe to receive IDS bulletins describing new signature updates, service packs, or product news. Enter your email address and a password at www.cisco.com/warp/public/779/largeent/it/ids_news/subscribe.html.
The IDSM has two logical switch ports: a capture or “sniffing” port (port 1), and a control port (port 2).
Monitored traffic must be sent to the capture port. Only the VLANs of which that capture port is a member can be monitored. ...
Read now
Unlock full access