Internet and E-business is forcing organisations into an era of open and trusted communications. This openness brings its share of vulnerabilities and problems, pushing both enterprises and service providers to take steps to guard their valuable data from intruders, hackers, and insiders. At the same time, demand for higher network performance is driving the migration of traditionally shared networks to switched networks. As we start deploying more and more content-aware services in the switched infrastructure, the need for security and intrusion detection is greater than ever to ensure reliability for Internet commerce and Web applications. With most of the Intrusion Detection System (IDS) products on the market today, devices must be placed on the Switched Port Analyzer (SPAN) port to monitor network traffic. Although the SPAN port can provide access to
network traffic, it does have certain limitations (for example, limited number of SPAN sessions, trunked traffic). The Cisco Catalyst 6500 IDS module is designed specifically to address switched environments by integrating the IDS functionality directly into the switch and taking traffic right off the switch backplane, thus bringing both switching and security functionality into the same chassis.
|
 |
|
