Installation guide
McAfee® Network Security Platform 6.0
Determining optimal Sensor location
Instead, consider the configuration in Figure “Stack” configuration for a single path:
Figure 3: Stack Configuration
In this scenario, the Sensors are “stacked” (one after the other) in much the same way you
might daisy chain a pair of switches.
Note: A crossover cable is required to make the connection between the Sensor
monitoring ports.
These Sensors are configured to run inline, failopen, and function as a failover Pair.
The advantages of this redundant configuration over others on a network with a single
path are as follows:
• There is no dependency on the Layer 2 or Layer 3 topologies for Sensor redundancy.
• If one Sensor fails, it fails open, and the other Sensor continues to scan with no
interruption.
• Because they are configured as a failover Pair, state will be maintained.
The single disadvantage is that duplicate alerts will be generated for UDP and ICMP
attacks. (More on this later in this document.)
9