RE: ATM decoding

[Seek Knowledge <aseeker03 () yahoo com>]

I am actually trying to deploy the IDS within the ATM
cloud. That is... between the edge switches and the
distribution switches and/or between the distribuiton
and core.

I already am monitoring at critical ethernet hand-off
points... but there are just way to many ethernet
ports to monitor them all. That's why I was trying to
get placed somewhere that I could get all traffic
without having to tap every port.

Thanks for the response.
-Aseeker


--- PPowenski () oag com wrote:

> Are your desktops processing native cell based ATM
> traffic i.e. with an
> ATM NIC?
> Not many companies are making them any longer I
> beleive.
> not many folks are doing that most use some type of
> encapsulation
> to/from ethernet.
> If your ATM switch is doing assembly / disassembly
> that ingress/egress
> point would be the best point for your IDS sensor.
>
> Otherwise keeping up with the cell assembly /
> disassembly could get
> quite hairy for any IDS software even if it could
> perform this.
>
>
>
> -----Original Message-----
> From: Seek Knowledge [mailto:aseeker03 () yahoo com] 
> Sent: 30 June 2005 05:08
> To: focus-ids () securityfocus com
> Subject: ATM decoding
>
>
> Anyone know of good IDS/IPS products that can decode
> ATM traffic? So far my list goes like this:
>
> ISS SiteProtector does not support ATM
> McAfee IntruShield does not support ATM
> TippingPoint UnityOne does not support ATM
>
> I am looking for software or hardware. I just need
> to
> be able to implement intrusion detection (prevention
> too if possible) into an ATM network.
>
> Thanks
> -aseeker03 (CISSP)



Send instant messages to your online friends http://uk.messenger.yahoo.com 

--------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it with real-world attacks from 
CORE IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 
to learn more.
--------------------------------------------------------------------------