topic RE: S8 and Darktrace Appliance- Monitoring Internal Traffic in ExtremeSwitching (EOS)

S8 and Darktrace Appliance- Monitoring Internal Traffic

Lorna_Racano1 — Wed, 27 Jun 2018 19:41:00 GMT

Evaluating an internal IDS product and need to provide a SPAN/Mirror port for their appliance to connect form our S8. We have more than 16 VLANs for a VTAP, how has anyone configured this. We have roughly 54 VLANS that need to be monitored.Thanks

RE: S8 and Darktrace Appliance- Monitoring Internal Traffic

Dave_Craig — Tue, 25 Sep 2018 21:35:00 GMT

Hi Lorna,

We are getting ready to evaluate Darktrace as well. Did you have any issues with mirroring all of your vlans to the Darktrace appliance?

Thanks

RE: S8 and Darktrace Appliance- Monitoring Internal Traffic

Lorna_Racano1 — Wed, 26 Sep 2018 00:47:00 GMT

Hi

I split how I configured the mirroring. I configured the uplinks on 1 10G port and then created vtaps for the VLANS on another 10G port The S8 limits the number of VLANS to 16 and will let you know when you have reached the limit.

Good Luck