Virus.Org  IT Security News and Information Portal. We offer the latest IT security news, updates, product reviews, books, and articles for all you IT security professionals out there. Enter and get the best IT security information on the Internet.

 

. Welcome to the Virus.Org Mailing List Archive  
.
.


[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]


Re: [Snort-users] fail-open nic and snort?
.

  • To: Crayola <[EMAIL PROTECTED]>
  • Subject: Re: [Snort-users] fail-open nic and snort?
  • From: Gulfie <[EMAIL PROTECTED]>
  • Date: Sun, 5 Mar 2006 14:38:04 -0800
  • Cc: [EMAIL PROTECTED]
  • Domainkeys-status: no signature
  • In-reply-to: <[EMAIL PROTECTED]>
  • References: <[EMAIL PROTECTED]>
  • Sender: [EMAIL PROTECTED]
.
 
On Sat, Mar 04, 2006 at 05:54:39PM -0500, Crayola wrote:
> I would like to build a snort based IPS solution but I cant seem to find a
> vendor who sells fail open nics. Since snort would be inline, I cant have it
> blocking my network connection if the system fails, loses power, etc. 
> 
> I checked out bypass switches from Netoptics but I would like something that
> can be installed directly in the PC. A PCI nic basically. 
> Any ideas? 

	The ABN-102, from portwell seems to be what you want, or something like it.
(Note, this isn't a recomendation, Iv'e never used them). 

	http://www.portwell.com/abn-102.htm

	A pair of intel gige ports on a card, with a power off bypass.  

	There are other vendors with similar products: 

	http://www.etinc.com/index.php?page=etfailover.htm	
	http://www.interfacemasters.com/products/
	http://www.adlinktech.com/PD/web/PD_detail.php?cKind=FF&pid=500&seq=6&id=20&sid=181
 
	Find one with (insert your os here) support, and you should be good, after a little
scripting and testing to make sure that the bypass is enabled whenever snort isn't running. 


> Thanks,
> Mike
> 
> 
> 
> 
> -------------------------------------------------------
> This SF.Net email is sponsored by xPML, a groundbreaking scripting language
> that extends applications into web and mobile media. Attend the live webcast
> and join the prime developer group breaking into this new coding territory!
> http://sel.as-us.falkag.net/sel?cmd=lnk&kid=110944&bid=241720&dat=121642
> _______________________________________________
> Snort-users mailing list
> [EMAIL PROTECTED]
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users


-------------------------------------------------------
This SF.Net email is sponsored by xPML, a groundbreaking scripting language
that extends applications into web and mobile media. Attend the live webcast
and join the prime developer group breaking into this new coding territory!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=110944&bid=241720&dat=121642
_______________________________________________
Snort-users mailing list
[EMAIL PROTECTED]
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

 
.
.
 
Copyright (c) Virus.Org 1997-2006.
All Trademarks Acknowledged.
Please view our Terms and Conditions and our Privacy Policy.