topic Re: IDS ADMINISTRATOR in Network Security https://community.cisco.com/t5/network-security/ids-administrator/m-p/481525#M100308 <HTML><HEAD></HEAD><BODY><P>what are the best possible methods to tune the existing configuration</P></BODY></HTML> Tue, 19 Jul 2005 10:08:53 GMT aksher 2005-07-19T10:08:53Z IDS ADMINISTRATOR https://community.cisco.com/t5/network-security/ids-administrator/m-p/481523#M100306 <P>what are the day to day activities of an IDS admin.</P> Sun, 10 Mar 2019 09:32:37 GMT https://community.cisco.com/t5/network-security/ids-administrator/m-p/481523#M100306 aksher 2019-03-10T09:32:37Z Re: IDS ADMINISTRATOR https://community.cisco.com/t5/network-security/ids-administrator/m-p/481524#M100307 <HTML><HEAD></HEAD><BODY><P>1) Looking out for new signatures</P><P>2) Tuning existing configuration to reduce false positives</P><P>3) Coordination with system admins whenever alerts are generated to confirm or deny malicious activity</P><P>4) Sifting through tons of event logs</P><P>5) Read the Cisco NetPro site</P><P>6) Study for CCNP</P><P></P><P></P><P>Rinse, repeat</P><P></P><P></P><P></P><P>Hope this helps.</P><P></P><P></P><P>Please remember to rate all replies</P><P></P></BODY></HTML> Mon, 18 Jul 2005 20:16:10 GMT https://community.cisco.com/t5/network-security/ids-administrator/m-p/481524#M100307 travis-dennis_2 2005-07-18T20:16:10Z Re: IDS ADMINISTRATOR https://community.cisco.com/t5/network-security/ids-administrator/m-p/481525#M100308 <HTML><HEAD></HEAD><BODY><P>what are the best possible methods to tune the existing configuration</P></BODY></HTML> Tue, 19 Jul 2005 10:08:53 GMT https://community.cisco.com/t5/network-security/ids-administrator/m-p/481525#M100308 aksher 2005-07-19T10:08:53Z