What are the options to deploy the TMS zl Module?
The TMS zl Module can be configured in one of two operating modes: Routing Mode or Monitor Mode. Monitor Mode is used to deploy the TMS zl module as an IDS only. It examines traffic for threats, matching packets to its IDS signature library and checking for protocol anomalies. However, the module does not take action to mitigate detected threats. Rather, it logs the threats to its event log. You can also configure the module to forward the logged IDS events to one or more of these locations according to the event’s severity: • Email addresses (up to three) • Syslog servers (up to three) • SNMP trap servers, such as HP ProCurve Manager Plus (PCM+) In Routing Mode, you must set up your network infrastructure so that the TMS zl Module acts as a router for all VLANs on which you want to manage threats. You assign the module an IP address on these VLANs so that it can route and filter their traffic. These VLANs are then called TMS VLANs and they must exist on the switch chassis the TMS zl m
