IPS and Trunking

From: trav_2@xxxxxxxxxxx
Date: 5 Feb 2007 18:44:15 -0000

Cisco has a great feature where I can configure all traffic on a switch to go to a trunk port, plug in the IPS/IDS to the trunk port and see all traffic. Can other vendors, such as Sourcefire, TippingPoint, ISS do this?

Thanks,

------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it
with real-world attacks from CORE IMPACT.
Go to http://www.coresecurity.com/index.php5?module=Form&action=impact&campaign=intro_sfw
to learn more.
------------------------------------------------------------------------

Follow-Ups:
- Re: IPS and Trunking
  - From: Jason
- Re: IPS and Trunking
  - From: Paul daSilva
- RE: IPS and Trunking
  - From: Andrew Plato

Prev by Date: Re: how to avoid false positive in generic cross site scripting attack ids signature
Next by Date: Re: Re: how to avoid false positive in generic cross site scripting attack ids signature
Previous by thread: how to avoid false positive in generic cross site scripting attack ids signature
Next by thread: RE: IPS and Trunking
Index(es):
- Date
- Thread

Relevant Pages

Change native VLAN on ASA 5520
... The 2950 switch is not under my control and it uses ... Is there a way to change the native vlan of the interface on the ASA 5520 ... trunk port, and then connected a pc client to another 3750 port configured ...
(comp.dcom.sys.cisco)
Re: IPS and Trunking
... This is a capability of the switch and can be handled by any vendor ... switch to go to a trunk port, plug in the IPS/IDS to the trunk port ... testing it with real-world attacks from CORE IMPACT. ...
(Focus-IDS)
Re: VLAN hopping - demonstration
... Cisco 6500 switch. ... There is NO trunk port on this switch but DTP is ... Cenzic Hailstorm finds vulnerabilities fast. ...
(Pen-Test)
Re: Need a sniffer/password capture to prove telnet is bad
... I think it s also called trunk port right? ... For users of Fedora Core releases ... > path his packets are travelling. ... > This is called a SNAP port, so if your switch doesn't support them, then ...
(Fedora)