Lancope StealthWatch System Hardware Installation Manual page 22

22
The following illustration shows how you can achieve this configuration by
connecting your network to the StealthWatch FlowSensor through the management
port.
In this configuration, you must configure a switch port (also called a mirror port), to
repeat all traffic to and from the host of interest to the mirror port. The FlowSensor
Monitor Port 1 must be connected to this mirror port. This allows the FlowSensor to
monitor traffic to and from the network of interest and to other networks. In this
instance, a network may be made up of some or all of the hosts connected to the switch.
A common way of configuring networks on a switch is to zone them into virtual local
area networks (VLANs), which are logical rather that physical connections of hosts. If
the mirror port is configured to mirror all ports on a VLAN or switch, the FlowSensor
can monitor all traffic to, from, and within the network of interest, as well as other
networks.
Note:
In all cases, Lancope recommends that you consult your switch manufacturer's
documentation to determine how to configure the switch mirror port and what
traffic will be repeated to the mirror port.
Pre-Configuration Considerations