McAfee M3050 - Network Security Platform Przewodnik Instalacji Strona 18

  • Pobierz
  • Dodaj do moich podręczników
  • Drukuj
  • Strona
    / 44
  • Spis treści
  • BOOKMARKI
  • Oceniono. / 5. Na podstawie oceny klientów
Przeglądanie stron 17
McAfee® Network Security Platform 6.0
Determining optimal Sensor location
Preventing duplicate alerts
To prevent the failover Pair from forwarding the same alert twice, each node in the Pair
adheres to the following rules:
The Sensor that received the attack packet on its monitoring port sends the signature
alert to McAfee.
®
Network Security Manager (Manager). (The Sensor that gets a copy
of the attack packet from its failover peer does not send an alert.)
The Sensor forwarding the alert also takes the configured response action, such as
sending a TCP reset.
The Sensor that has been online the longest is responsible for sending all
reconnaissance and DoS alerts to the Manager.
In the event that both Sensors have been up for exactly the same amount time, the
Sensor with the higher value serial number will be responsible for sending all
reconnaissance and DoS alerts.
The reality check is that because the previous “stacked” configuration results in attacks
arriving on the monitoring ports of both Sensors (unless blocking is enabled), this
configuration will cause some duplicate alerts to be generated. The details are as follows:
There will be no issue with reconnaissance and DoS attacks because one Sensor in a
failover Pair is always dedicated to send these alerts.
There will be no issue with TCP signature attacks either, thanks to the stateful nature
of the scanning engine. That is, even though both Sensors will get the attack packet
on their monitoring ports, the second Sensor will actually get the packet on its failover
port first. When it subsequently gets the packet for a second time on its monitoring
port, the packet will be recognized and treated as a duplicate packet. The duplicate
packet will be forwarded along, but no alert will be generated.
However, because UDP and ICMP are not stateful, the same logic does not apply to
those packets. Instead, UDP and ICMP attacks will create duplicate alerts in this
configuration.
Summary
If the current network failover topology has been configured in a logical fashion, you will no
doubt see a pattern as you research the existing infrastructure. In this case, follow that
pattern when you add the Sensors. If the current topology does not follow a logical pattern,
address the issue before you consider adding Network Security Platform failover, and
avoid the possibility of Network Security Platform taking the blame for a flaw in the network
design.
10
Przeglądanie stron 17
1 2 ... 13 14 15 16 17 18 19 20 21 22 23 ... 43 44

Komentarze do niniejszej Instrukcji

Brak uwag

Harbor Freight Tools 3500 lb. Capacity Drop Leg Heavy Duty Trailer Jack manuals

Owner’s manuals and user’s guides for Welding System Harbor Freight Tools 3500 lb. Capacity Drop Leg Heavy Duty Trailer Jack.
We providing 1 pdf manuals Harbor Freight Tools 3500 lb. Capacity Drop Leg Heavy Duty Trailer Jack for download free by document types: Manual






More products and manuals for Welding System Harbor Freight Tools

Models Document Type
97719 User Manual   Harbor Freight Tools 97719 User's Manual, 17 pages
225 Amp_AC, 240 Volt, Stick Welder Manual   Harbor Freight Tools 225 Amp_AC, 240 Volt, Stick Welder Product manual, 16 pages
240 Volt Inverter Plasma Cutter with Digital Display Manual   Harbor Freight Tools 240 Volt Inverter Plasma Cutter with Digital Display Product manual, 24 pages
Stud Welder Dent Repair Kit Manual   Harbor Freight Tools Stud Welder Dent Repair Kit Product manual, 16 pages
91146 User Manual   Harbor Freight Tools 91146 User's Manual, 29 pages
3664 User Manual   Harbor Freight Tools 3664 User's Manual, 11 pages
70 Amp_AC, 120 Volt, Stick Welder Quick Start Guide   Harbor Freight Tools 70 Amp_AC, 120 Volt, Stick Welder Quick Start Guide, 4 pages
1/4 in. Female Brass Industrial Plug Manual   Harbor Freight Tools 1/4 in. Female Brass Industrial Plug Product manual, 28 pages
225 Amp_AC, 240 Volt, Stick Welder Quick Start Guide   Harbor Freight Tools 225 Amp_AC, 240 Volt, Stick Welder Quick Start Guide, 4 pages
Bench Bar and Rod Bender Manual   Harbor Freight Tools Bench Bar and Rod Bender Product manual, 27 pages
80 Amp_DC, 120 Volt, Inverter Stick Welder Manual   Harbor Freight Tools 80 Amp_DC, 120 Volt, Inverter Stick Welder Product manual, 12 pages
Portable Torch Kit with Oxygen and Acetylene Tanks Manual   Harbor Freight Tools Portable Torch Kit with Oxygen and Acetylene Tanks Product manual, 20 pages
4_1/2 in. Stainless Knotted Wire Wheel Manual   Harbor Freight Tools 4_1/2 in. Stainless Knotted Wire Wheel Product manual, 1 pages
170 Amp_DC, 240 Volt, MIG/Flux Cored Welder Quick Start Guide    Harbor Freight Tools 170 Amp_DC, 240 Volt, MIG/Flux Cored Welder Quick Start Guide, 4 pages
Compact Bender Manual   Harbor Freight Tools Compact Bender Product manual, 27 pages