IDS mailing list archives

RE: Traffic Balancing on High-speed IDS


From: kgeorgiades () toplayer com
Date: Sun, 27 Jul 2003 20:48:58 -0400

 Michael,

Does that mean that the Catalyst 6500 will have an IDS Balancer blade?
Will this be physical port based balancing or host based group balancing?



Thanks,

Ken G.


-----Original Message-----
From: Michael Mastrole
To: 'Thiago Mello'; focus-ids () securityfocus com
Sent: 7/25/03 9:38 AM
Subject: RE: Traffic Balancing on High-speed IDS

Thiago,

Cisco has a solution that will enable you to load balance IDS and you
don't need to purchase a load balancer providing you have a Catalyst
6500 switch.  We are in the process of developing a white paper which
details how to do this and I will forward it to you when it is complete.

----------------------
 
Michael Mastrole
Team Lead - Security Technologies
PTMO Organization
Cisco Systems, Inc.
63 Paige Lane
Moriches, NY 11955


-----Original Message-----
From: Thiago Mello [mailto:tmello () pop com br] 
Sent: Thursday, July 17, 2003 10:59 AM
To: focus-ids () securityfocus com
Subject: Traffic Balancing on High-speed IDS


Hi,

Im developing a IDS based on Sensor for High-Speed Networks, and Im
reading some paper about distributing the traffic for IDS sensors.

I want of you some opinions on how the best way to distribute the
traffic to the sensors, and distribute guaranteeing the attacks, such as
DDoS. Some links, papers, are also welcome.

Thanks in advance.

Thiago Mello


------------------------------------------------------------------------
-------
Is your IDS deployed correctly?
Find out by easily testing it with real-world attacks from CORE IMPACT.
Go to www.coresecurity.com/promos/sf_eids1 to learn more.
------------------------------------------------------------------------
-------



------------------------------------------------------------------------
---
------------------------------------------------------------------------
---

---------------------------------------------------------------------------
---------------------------------------------------------------------------


Current thread: