firewall and the unit)
your firewall’s/router’s documentation for information on how to do this. For
more information on using the management utility to access the USC10G4
from a remote location, please see page 29.
For remote deployment it would be advisable to change the unit’s retrieve
mode boot setting so that the unit boots up with retrieve mode on by default
(see page 34 for instructions). When retrieve mode is off, the unit will not
respond to any management communications and it will be necessary to
manually toggle the unit into retrieve mode by pressing the retrieve button on
the unit’s front panel in order to communicate with the unit.
DEPLOYMENT SCENARIOS
Since the USC10G4 requires no configuration, it can be placed pretty much
anywhere on a network. Where you choose to place the unit depends on which
traffic you would like to capture. Using the USC10G4 in inline mode offers the
most flexibility for deployment, however, it may also be connected to a router
or switch’s SPAN/mirror port. Below is a small sampling of deployment
scenarios.
for the utility to use to connect to the unit. Please consult
INTERNET
Scenario 1.
In this scenario, the USC10G4 is placed at the network perimeter, between the internet
connection and the firewall. In this location, the unit will capture all traffic originating from
the internet, even the transmissions that the firewall would block, and all the outbound
traffic from the network, but none of the internal network traffic.
ROUTER
FIREWALL
LAN
INTERNET
ROUTER
FIREWALL
LAN
IPCopper USC10G4 Product Manual
11
Scenario 2.
In this scenario, the USC10G4 is placed at the network perimeter, between the firewall and
the LAN. In this location, the unit will capture all traffic originating from the internet, minus
the traffic blocked by the firewall, and all the outbound traffic from the network, but none of
the internal network traffic.