46
COMMANDCENTER NOC ADMINISTRATOR GUIDE
Deployment
Place the Ethernet TAP on the Ethernet cable in the same location where an Ethernet hub would
be used. The Ethernet tap has the exact same function as the hub, except that one of the ports is
uni-directional and outputs data that is passing over the wire. This is the port that is connected to
CC-NOC’s monitoring interface.
Figure 58 Ethernet TAP Deployment
Configure Appliance Home Networks
The CC-NOC that has been selected to handle intrusion detection will detect some signatures
differently depending on whether or not they are incoming or outgoing from the home network.
For this reason, it is important to set up the home network for the device to ensure that the
intrusion detection is as accurate as possible and that the number of false positive alerts is
minimized.
1.
Click on the
Admin
tab in the top navigation bar.
2.
Click
Intrusion Detection Configuration
.
3.
Click
Configure Home Appliance Networks
.
All of the Intrusion Detection appliances that can communicate with this system are listed in the
box. The
Last Change
field indicates the last time that the home network for the appliance was
changed.
Figure 59 Selecting an Intrusion Detection Appliance for Home Network Configuration
Firewall
Router
Network Ports
Ethernet TAP
Aggregated Monitoring Port
Monitoring Port
CCNOC
Managed
Network
Internet
Содержание COMMANDCENTER NOC
Страница 2: ...This page intentionally left blank...
Страница 12: ...xii FIGURES...
Страница 20: ...8 COMMANDCENTER NOC ADMINISTRATOR GUIDE...
Страница 114: ...102 COMMANDCENTER NOC ADMINISTRATOR GUIDE...
Страница 132: ...120 COMMANDCENTER NOC ADMINISTRATOR GUIDE...
Страница 144: ...132 COMMANDCENTER NOC ADMINISTRATOR GUIDE...
Страница 148: ...136 COMMANDCENTER NOC ADMINISTRATOR GUIDE...
Страница 155: ...APPENDIX G NETWORK TRAFFIC OVERHEAD NETWORK MANAGEMENT S NECESSARY EVIL 143 255 80 5301 00...