mirror port possible?

grahamo

Is it possible to setup an interface to mirror another? for the purpose of IDS ingesting in my case.

Bruce_Briggs

Not that I have ever seen.
If you have a managed switch connected to your firewall, then you can set up port mirroring on it.

There is this option, but I'm not sure that this does exactly what you want:

Configure One VLAN Bridged Across Two Interfaces
https://www.watchguard.com/help/docs/help-center/en-US/Content/en-US/Fireware/networksetup/vlan_example_1vlan_2switches_c.html

james.carson

Hi @grahamo

The firewall doesn't support this -- depending on the hardware/model you're using the firewall may not even be capable.

If you need to do this, I'd suggest a purpose built tap device or small switch that can mirror the port for you.