Snort mailing list archives

Switch TAP placement question.


From: "Brei, Matt" <mbrei () medclaiminc com>
Date: Thu, 15 May 2003 11:50:51 -0400

Hello all,

 

I have a bank of about 12 24 port switches.  All of the routers and
firewall are on the first switch, then the servers are on second and
third, then all workstations and printers are on the rest.  Where should
I place the tap so that Internet activity can be monitored as well as
compromise attempts against a server or router?  Should this go on the
router/firewall switch since it is the last switch before the "outside"
or should I use more then one tap?

 

Thanks in advance,

 

Matt Brei

 


Current thread: