Juniper Networks IDP 800, IDP250, IDP75 Advantages, Disadvantages, Transparent Mode Inline Active

IDP 75, 250, 800, and 8200 Installation Guide

Table 2: Advantages and Disadvantages of Sniffer Mode (Passive)

Advantages	Disadvantages
„ Seamlessly replaces the current intrusion	„ Passively monitors with limited prevention
detection	only
„ Causes minimal network changes	„ Requires a hub or the Switched Port Analyser
„ Does not create an additional	(SPAN) port of a switch
point-of-failure gateway

„Monitors and logs suspicious network activity

Figure 2: Transparent Mode (Inline Active)

	Internet
Firewall			Hub or
		IP 2.2.2.1	Switch
	IP 1.1.1.1
	eth2
	No ip address
IDP Sensor	Forwarding Interface		Management Server
			IP 2.2.2.4
eth0 IP 2.2.2.7 MGT	eth3
Interface	No IP address
	Forwarding Interface
Hub or
Switch
			User Interface
			IP 2.2.2.5
Server1	Server2	Server3
IP 1.1.1.2	IP 1.1.1.3	IP 1.1.1.4
GW 1.1.1.1	GW 1.1.1.1	GW 1.1.1.1
	Protected Machines

Table 3 lists the advantages and the disadvantages of using the sensor in active transparent (inline) mode.

4„ IDP Configuration Basics