Hi guys, would like to consult the IPS setup of our network. We have a server switch connected to our core switch in trunk mode. They utilize two segments configured in portchannel.
Now, our plan is to insert our IPS inline to monitor the traffic coming to and out of our servers. Please see attached diagram for reference.
My query is, do we have to configure anything in our mcafee ips to support the current setup. Our goal is to just monitor all traffic and apply IPS in the future but we do not particularly need to see what vlans the alerts are generated in.
You only need to configure port cluster for your 2 interfaces on IPS.