TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to
[EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any problems!
----------------------------------------------------------------------------
No, you can only monitor 1 interface at a time per daemon.
but you can run multiple daemons per box(i know you could in rs3), provided you have
the CPU hamsters. Running 2 daemons can be deadly so be carefull. The best solution is
to aggregate the connections either via span porting or through some hardware hack
such as a read only network tap.
Kenneth Whitfield wrote:
>
> TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to
> [EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any problems!
> ----------------------------------------------------------------------------
>
> Does RealSecure support multiple stealth interfaces on a Solaris box?
>
> -----Original Message-----
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
> Mark Teicher
> Sent: Friday, July 14, 2000 11:57 AM
> To: mclass; Arie Elkins
> Cc: [EMAIL PROTECTED]
> Subject: RE: RealSecure on Solaris
>
>
> TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to
> [EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any
> problems!
> ----------------------------------------------------------------------------
>
> Installing RealSecure System Engine on Unix
> The Unix installation of RealSecure network engine has no graphical user
> interface. It is performed from a Unix shell prompt.
> To install RealSecure network engines for Unix, perform the following steps:
> 1. Log in using the superuser or root account.
> 2. Insert the CD into the CD-ROM drive.
> 3. Mount the CD-ROM.
> 4. Type the following command, and then press Enter:
> pkgadd -d <full path to install image>
> The full path to install image is the location of your program files:
> either on the CD, on your local drive, or on a network drive.
> 5. Press Enter to select the installation of all packages in the
> archive (the default).
> 6. Enter y to install with default parameters
> 7. Enter y to view the license agreement.
> 8. Enter y to accept the terms of the agreement.
> 9. Enter n to cancel installation and return to the Unix prompt.
> 10. Enter the path to the directory where you want to install
> RealSecure.
> 11. If you are installing for the first time, the install path defaults
> to /opt/ISS.
> 12. Choose a cryptographic provider.
> 13. Enter n to select algorithms.
> 14. Make selections.
> 15. Enter y to run the install scripts.
> 16. Reboot the system after install scripts are complete.
>
>
> Configuring stealth mode on UNIX
> The system is configured so that the stealth interface is not enabled at
> system boot. In the RealSecure startup script bring up the stealth
> interface with the following command:
> /usr/sbin/ifconfig hmeo plumb -arp
> Running ifconfig -a shows the following for the device:
>
> hmeo: flags=8c3<UP,BROADCAST,RUNNING,NOARP,MULTICAST> mtu 4352
> inet 0.0.0.0 netmask 0
> ether 8:0:20:f0:0:ba
>
>
> At 11:50 AM 7/14/00 +1000, mclass wrote:
>
> >TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to
> >[EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any
> problems!
> >---------------------------------------------------------------------------
> -
> >
> >Arie
> >
> >I'm sure you will receive a few answers to this -
> >
> >The correct command to plumb the interface in promiscous mode is:
> >
> >/usr/sbin/ifconfig hmex plumb -arp up
> >
> >replacing hmex with your interface name eg hme0.
> >
> >Then check the interface using ifcongig -a
> >
> >It should show up in the list and have an IP address of 0.0.0.0.
> >
> >Then follow the instructions as provided by the ISS tech support engineer
> in
> >the engine properties.
> >
> >Hope this helps
> >
> >MARC CLASS
> >
> >
> >
> >
> >
> >
> > >===== Original Message From "Arie Elkins" <[EMAIL PROTECTED]>
> =====
> > >TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message
> to
> > >[EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any
> > problems!
> >
> >---------------------------------------------------------------------------
> -
> > >
> > >I'm having a problem setting up the RealSecure engine on Solaris. We've
> got
> > >two nic cards in the machine, and we set up the first nic without an IP
> > >address outside the firewall, but no matter what we do, it doesn't do
> > >anything on that NIC card. It will only use the card we set inside the
> > >firewall with an IP to pick up traffic. What could I be doing wrong?
> >
> >[EMAIL PROTECTED]
> >
> >
>
>
>
--
Matthew F. Caldwell, CISSP - Senior Consultant
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Guarded.Net - An Information Security Company
connect(); to the future of secure computing!
Email: [EMAIL PROTECTED]
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
http://www.guarded.net
---------------------------------------------------------------------------
This e-mail may contain proprietary commercial information and is intended
for the addressed recipient(s) only. If you are not an addressed
recipient of this e-mail and have received it in error, you must delete
it. You may not forward or disseminate information contained in this
e-mail without permission from Guarded.Net.
Questions? Contact [EMAIL PROTECTED]
---------------------------------------------------------------------------
