MDI Sensor

[HeshamNouh]

Dear All,

Do I need to install the MDI sensor on all of the DCs in the network (if there are multiple DCs) in the same forest?

Or I have to install it on one DC and it will be enough and cover all of the users.

[#2]

Hello @HeshamNouh , you need to install MDI sensors to all DCs in order to properly monitor the audit logs and provide alerts for your infrastructure. 

[#3]

Hello @HeshamNouh ,

You can install a Standalone sensor and forward traffic from all DC to this sensor by using port mirroring. This will cover all your domain controllers and users. 

[#4]

Thanks, ldrosos, noted.

[#5]

Thanks, mikhailf, noted