Cisco ERSPAN - To FortiGate (IDS) Interface

[Ashik_Sheik]

Hello,

The design is to get ERSPAN traffic from Cisco to FortiGate Interface to act like IDS. How to achieve this and what configuration needs to enable on FortiGate. Is GRE mandatory?

Regards,

Ashu

[rarumugam]

Hello Ashu,

As I understand, you would like FortiGate to operate as an IDS appliance( i.e. without actually processing the packets). Correct me, If I am wrong.

You could put the FortiGate in one-arm sniffer mode and it would serve the purpose. Below is the link to configure it on the FortiGate,

https://docs.fortinet.com/document/fortigate/6.0.0/handbook/430641/one-armed-sniffer

Regards,

Ram.