46
COMMANDCENTER NOC ADMINISTRATOR GUIDE
Deployment
Place the Ethernet TAP on the Ethernet cable in the same location where an Ethernet hub would
be used. The Ethernet tap has the exact same function as the hub, except that one of the ports is
uni-directional and outputs data that is passing over the wire. This is the port that is connected to
CC-NOC’s monitoring interface.
Figure 58 Ethernet TAP Deployment
Configure Appliance Home Networks
The CC-NOC that has been selected to handle intrusion detection will detect some signatures
differently depending on whether or not they are incoming or outgoing from the home network.
For this reason, it is important to set up the home network for the device to ensure that the
intrusion detection is as accurate as possible and that the number of false positive alerts is
minimized.
1.
Click on the
Admin
tab in the top navigation bar.
2.
Click
Intrusion Detection Configuration
.
3.
Click
Configure Home Appliance Networks
.
All of the Intrusion Detection appliances that can communicate with this system are listed in the
box. The
Last Change
field indicates the last time that the home network for the appliance was
changed.
Figure 59 Selecting an Intrusion Detection Appliance for Home Network Configuration
Firewall
Router
Network Ports
Ethernet TAP
Aggregated Monitoring Port
Monitoring Port
CCNOC
Managed
Network
Internet
Summary of Contents for COMMANDCENTER NOC
Page 2: ...This page intentionally left blank...
Page 12: ...xii FIGURES...
Page 20: ...8 COMMANDCENTER NOC ADMINISTRATOR GUIDE...
Page 114: ...102 COMMANDCENTER NOC ADMINISTRATOR GUIDE...
Page 132: ...120 COMMANDCENTER NOC ADMINISTRATOR GUIDE...
Page 144: ...132 COMMANDCENTER NOC ADMINISTRATOR GUIDE...
Page 148: ...136 COMMANDCENTER NOC ADMINISTRATOR GUIDE...
Page 155: ...APPENDIX G NETWORK TRAFFIC OVERHEAD NETWORK MANAGEMENT S NECESSARY EVIL 143 255 80 5301 00...