Juniper IDP 250, Installation Manual

Page: 18 / 68

IDP 75, 250, 800, and 8200 Installation Guide
4 „
IDP Configuration Basics
Figure 2: Transparent Mode (Inline Active)
Table 3 lists the advantages and the disadvantages of using the sensor in active
transparent (inline) mode.
Table 2: Advantages and Disadvantages of Sniffer Mode (Passive)
Advantages Disadvantages
„
Seamlessly replaces the current intrusion
detection
„
Causes minimal network changes
„
Does not create an additional
point-of-failure gateway
„
Monitors and logs suspicious network
activity
„
Passively monitors with limited prevention
only
„
Requires a hub or the Switched Port Analyser
(SPAN) port of a switch
Management Server
IP 2.2.2.4
User Interface
IP 2.2.2.5
Protected Machines
Hub or
Switch
Firewall
eth2
No ip address
Forwarding Interface
Server1
IP 1.1.1.2
GW 1.1.1.1
Server2
IP 1.1.1.3
GW 1.1.1.1
Server3
IP 1.1.1.4
GW 1.1.1.1
IP 2.2.2.1
IP 1.1.1.1
IDP Sensor
Hub or
Switch
eth3
No IP address
Forwarding Interface
eth0 IP 2.2.2.7 MGT
Interface
Internet