Configure traffic mirroring
This article is one in a series of articles describing the deployment path for OT monitoring with Microsoft Defender for IoT and provides an overview of the procedures for configuring traffic mirroring in your network.
Prerequisites
Before you configure traffic mirroring, make sure that you've decided on a traffic mirroring method. For more information, see Prepare an OT site deployment.
Traffic mirroring processes
Use one of the following procedures to configure traffic mirroring in your network:
SPAN ports:
- Configure mirroring with a switch SPAN port
- Configure traffic mirroring with a Remote SPAN (RSPAN) port
- Update a sensor's monitoring interfaces (configure ERSPAN)
Virtual switches:
Defender for IoT also supports traffic mirroring with TAP configurations. For more information, see Active or passive aggregation (TAP).