IDS to internal host

[fnb]

I am currently working on a plan to install a firewall system for a company. My question is what needs to be in place to allow an IDS on the outside interface to talk to a host set up with Policy Manager on the trusted network through my pix.

[net.admin]

A conduit. Also known as a static map-thru.

Regards,

Scott

[tcrellin]

The IDS has two interfaces: the sniffing port and the management port. Connect the sniffing port to the outside network and the managment port to the inside. This way the IDS is totally undetectable and you do not have to re-configure the PIX to pass the management traffic.