MDI Sensor

Occasional Contributor

Dear All,

 

Do I need to install the MDI sensor on all of the DCs in the network (if there are multiple DCs) in the same forest?

Or I have to install it on one DC and it will be enough and cover all of the users.

 

4 Replies

Hello @HeshamNouh , you need to install MDI sensors to all DCs in order to properly monitor the audit logs and provide alerts for your infrastructure. 

Hello @HeshamNouh ,

 

You can install a Standalone sensor and forward traffic from all DC to this sensor by using port mirroring. This will cover all your domain controllers and users. 

Thanks, ldrosos, noted.
Thanks, mikhailf, noted