Thread Info
  • State Not Answered
  • Replies 1 reply
  • Subscribers 8 subscribers
  • Views 1764 views
  • Users 0 members are here
Options
Suggested

Hyper-V VM Question

DavidGorman

HI all,

I'm interested in the NDR solution to add to our Sophos XDR setup.

I'm puzzled on one thing. If we setup a Hyper-V VM for the NDR solution and configure a virtual switch for packet capture, do we still need to configure a SPAN port on our physical core switch and connect that to the Hyper-V host too?

Sorry, this is a very dumb question.

Parents
  • 0

    Basically the answer is: It depends on your goal. 
    You can monitor the traffic from your switch, or you bridge your SPAN Port into your VM. That is up to you. 
    For maximal visibility, it would be good to mirror all traffic or only ports, interesting to you, to the VM.

    __________________________________________________________________________________________________________________

Reply
  • 0

    Basically the answer is: It depends on your goal. 
    You can monitor the traffic from your switch, or you bridge your SPAN Port into your VM. That is up to you. 
    For maximal visibility, it would be good to mirror all traffic or only ports, interesting to you, to the VM.

    __________________________________________________________________________________________________________________

Children
No Data
Unfiltered HTML