4260 in traditional IDS mode

gdntsoc · ‎01-10-2007

Greetings all. Some of the documentation for the IPS 4260 wasn't entirely clear, so I wanted to ask a very basic question.

Does the 4260 ONLY operate in 'inline' mode or can it run as a traditional IDS device (passive, sniffing interfaces) much like the other 42xx models? Thank you.

edadios · ‎01-10-2007

It can run in promiscuous.

http://www.cisco.com/en/US/customer/products/hw/vpndevc/ps4077/products_data_sheet09186a008014873c.html

Regards

Matthew Hill · ‎01-18-2007

The standard 4260 has a single sensing interface, so all it can do in that configuration is IDS style promiscuous operation.

You'd need to buy additional interfaces to have inline operation, and even then you could opt to have each interface sniffing a seperate segment in IDS mode.