TMS zl Management and Configuration Guide ST.1.0.090213

3-6

Initial Setup in Monitor Mode

Deploying the TMS zl Module

This section includes guidelines for deploying your TMS zl Module:

■ Selecting the deployment location

■ Readying the host switch

Selecting the Deployment Location

In monitor mode, the module operates as a traditional offline IDS, which

analyzes traffic that is mirrored to it. Because you are using mirroring, you

should keep in mind the following considerations when choosing a deploy-

ment location for the TMS zl Module:

■ Does your network include switches that support remote mirroring?

Otherwise, the TMS zl Module can only analyze traffic that actually passes

through the host switch.

■ How much traffic do you expect will be mirrored to the module? Can your

switch mirror the volume of traffic required?

■ How will the mirrored traffic affect your available network bandwidth?

Figure 3-3. Monitor Mode Implementation