Logo -Internet Security Systems

q000048

advICE :Support :KB : q000048

Can I run the interface on one machine to be notified when another machine is attacked?

This article applies to: BlackICE Defender.

SUMMARY

Yes, though the functionality may not be exactly what you want.

DETAILS

This article is for more advanced users

All communication between the intrusion detection daemon (blackd.exe) and the user interface (blackice.exe) goes through file system calls. This means that the interface can be run on any remote machine.

For example, you might run the product on HUMPTY, which is running some sort of gateway software, but your main machine is DUMPTY. You want to run the intrusion detection/protection on HUMPTY, but run the interface on DUMPTY. This works fine through File and Print Sharing.

First, make sure that you use NetBEUI for File and Print Sharing. (Using TCP/IP won't work). NetBEUI must be installed on both machines.

On HUMPTY, share the directory the product is installed in. For example:

 
net share NETICE="c:\Program Files\Network ICE\BlackICE" 
The above example is for Windows NT. You can do this from the Explorer GUI by right-hand-mouse-clicking on the directory icon and selecting "Sharing".

On DUMPTY, map a drive to HUMPTY:

 
net use X: \\HUMPTY\NETICE 

Go to the X: drive and run the "blackice.exe" program. It will now run on DUMPTY, but monitor HUMPTY. When an intrusion occurs, the icon will start flashing.

Note: Only one copy of the interface can currently run at the same time.

 
Keywords: remote 
Version:  1.8.5.5 
Fixed:     
Modified: 1999-10-04 
SEARCH



Privacy Policy |  Copyright Info