Traffic Balancing on High-speed IDS

[Massimo <massimo.mail () quipo it>]

Hello,

Did Cisco published the white paper on N-IDS load balancing with Cisco 
6500 switch?

Is there anyone that have experience to share with us in N-IDS load 
balancing with Cisco or Enterasys, HP, Nortel, etc switch.

I use TopLayer equipment and they work (also if they sometime lose 
traffic on high speed connection), but they are really expensive just to 
do simple load banacing bethween nids (i don't need "application 
balancing").

Best Regards,
                        Massimo


Michael Mastrole wrote:
> Thiago,
>
> Cisco has a solution that will enable you to load balance IDS and you
> don't need to purchase a load balancer providing you have a Catalyst
> 6500 switch.  We are in the process of developing a white paper which
> details how to do this and I will forward it to you when it is complete.
>
> ----------------------
>  
> Michael Mastrole
> Team Lead - Security Technologies
> PTMO Organization
> Cisco Systems, Inc.
> 63 Paige Lane
> Moriches, NY 11955
>
>
> -----Original Message-----
> From: Thiago Mello [mailto:tmello () pop com br] 
> Sent: Thursday, July 17, 2003 10:59 AM
> To: focus-ids () securityfocus com
> Subject: Traffic Balancing on High-speed IDS
>
>
> Hi,
>
> Im developing a IDS based on Sensor for High-Speed Networks, and Im
> reading some paper about distributing the traffic for IDS sensors.
>
> I want of you some opinions on how the best way to distribute the
> traffic to the sensors, and distribute guaranteeing the attacks, such as
> DDoS. Some links, papers, are also welcome.
>
> Thanks in advance.
>
> Thiago Mello
>
>
> ------------------------------------------------------------------------
> -------
> Is your IDS deployed correctly?
> Find out by easily testing it with real-world attacks from CORE IMPACT.
> Go to www.coresecurity.com/promos/sf_eids1 to learn more.
> ------------------------------------------------------------------------
> -------
>
>
>
> ---------------------------------------------------------------------------
> ---------------------------------------------------------------------------
>
> ---
> [Quipo ISP - Questa E-mail e' stata controllata dal programma Declude Virus]
> [Quipo ISP - This E-mail was scanned for viruses by Declude Virus]

--------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it with real-world attacks from CORE
IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 to learn more.
--------------------------------------------------------------------------