Snort mailing list archives
Re: fail-open nic and snort?
From: Gulfie <gulfie () grotto-group com>
Date: Sun, 5 Mar 2006 14:38:04 -0800
On Sat, Mar 04, 2006 at 05:54:39PM -0500, Crayola wrote:
I would like to build a snort based IPS solution but I cant seem to find a vendor who sells fail open nics. Since snort would be inline, I cant have it blocking my network connection if the system fails, loses power, etc. I checked out bypass switches from Netoptics but I would like something that can be installed directly in the PC. A PCI nic basically. Any ideas?
The ABN-102, from portwell seems to be what you want, or something like it. (Note, this isn't a recomendation, Iv'e never used them). http://www.portwell.com/abn-102.htm A pair of intel gige ports on a card, with a power off bypass. There are other vendors with similar products: http://www.etinc.com/index.php?page=etfailover.htm http://www.interfacemasters.com/products/ http://www.adlinktech.com/PD/web/PD_detail.php?cKind=FF&pid=500&seq=6&id=20&sid=181 Find one with (insert your os here) support, and you should be good, after a little scripting and testing to make sure that the bypass is enabled whenever snort isn't running.
Thanks, Mike ------------------------------------------------------- This SF.Net email is sponsored by xPML, a groundbreaking scripting language that extends applications into web and mobile media. Attend the live webcast and join the prime developer group breaking into this new coding territory! http://sel.as-us.falkag.net/sel?cmd=lnk&kid=110944&bid=241720&dat=121642 _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
------------------------------------------------------- This SF.Net email is sponsored by xPML, a groundbreaking scripting language that extends applications into web and mobile media. Attend the live webcast and join the prime developer group breaking into this new coding territory! http://sel.as-us.falkag.net/sel?cmd=lnk&kid=110944&bid=241720&dat=121642 _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- fail-open nic and snort? Crayola (Mar 05)
- Re: fail-open nic and snort? Gulfie (Mar 05)
- Re: fail-open nic and snort? Frank Knobbe (Mar 05)