Juniper Networks IDP 800 Manuel D’Utilisation

Page de 68
IDP 75, 250, 800, and 8200 Installation Guide
4
 
„  IDP Configuration Basics
Figure 2:  Transparent Mode (Inline Active) 
Table 3 lists the advantages and the disadvantages of using the sensor in active 
transparent (inline) mode.
Table 2:  Advantages and Disadvantages of Sniffer Mode (Passive)
Advantages
Disadvantages
„
Seamlessly replaces the current intrusion 
detection
„
Causes minimal network changes
„
Does not create an additional 
point-of-failure gateway
„
Monitors and logs suspicious network 
activity
„
Passively monitors with limited prevention 
only
„
Requires a hub or the Switched Port Analyser 
(SPAN) port of a switch
Management Server 
IP 2.2.2.4
User Interface  
IP 2.2.2.5
Protected Machines
Hub or 
Switch
Firewall
eth2 
No ip address
 Forwarding Interface
Server1
IP 1.1.1.2
GW 1.1.1.1
Server2
IP 1.1.1.3
GW 1.1.1.1
Server3
IP 1.1.1.4
GW 1.1.1.1
IP 2.2.2.1
IP 1.1.1.1
IDP Sensor
Hub or 
Switch
eth3  
No IP address
Forwarding Interface
eth0 IP 2.2.2.7 MGT 
Interface
Internet