topic Re: IPS on 887 Router in Network Security

IPS on 887 Router

rgs_000000 — Sun, 10 Mar 2019 11:56:01 GMT

I am about to install an 887 for a client and he wants to know if he can get reports of all successful VPN logons, so he can see who has been on the network. What information is available from IPS logs on an 887?

Alternatively, what information could he get from IDS on an ASA?

Re: IPS on 887 Router

Jennifer Halim — Mon, 22 Mar 2010 04:52:09 GMT

IPS is not design to provide logs for successful VPN connections. Logs of successfully VPN connections can be gathered through syslog, and you can send the syslog messages to an external syslog server.

Here is the doc for your reference:

http://www.cisco.com/en/US/partner/prod/collateral/iosswrel/ps6537/ps6586/ps6635/ps6659/prod_white_paper0900aecd803fc77b.html

Similarly IPS on ASA is design for Intrusion Prevention when specific traffic matches the IPS signature. Here is more information on IPS for your reference:

http://www.cisco.com/en/US/prod/collateral/vpndevc/ps5729/ps5713/ps4077/data_sheet_c78-459036_ps4077_Products_Data_Sheet.html

Hope that helps.

Re: IPS on 887 Router

rgs_000000 — Mon, 22 Mar 2010 21:46:31 GMT

Thanks halijenn, that sounds like the answer. I can't reach the document you linked to but I'll check out syslog.