Skip to main content
Ashik_Sheik
Ashik_Sheik
New Member
June 13, 2022
Question

Cisco ERSPAN - To FortiGate (IDS) Interface

Hello,

 

The design is to get ERSPAN traffic from Cisco to FortiGate Interface to act like IDS. How to achieve this and what configuration needs to enable on FortiGate. Is GRE mandatory?

 

Regards,

 

Ashu

1 reply

rarumugam
Staff
rarumugam
Staff
June 14, 2022

Hello Ashu,

 

As I understand, you would like FortiGate to operate as an IDS appliance( i.e. without actually processing the packets). Correct me, If I am wrong.

 

You could put the FortiGate in one-arm sniffer mode and it would serve the purpose. Below is the link to configure it on the FortiGate,

 

https://docs.fortinet.com/document/fortigate/6.0.0/handbook/430641/one-armed-sniffer

 

Regards,

Ram.

Terms & ConditionsAccessibility statement
Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.
Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT