topic Re: AIP-SSM log to a SIM in Network Security https://community.cisco.com/t5/network-security/aip-ssm-log-to-a-sim/m-p/968695#M80288 <HTML><HEAD></HEAD><BODY><P>Enable signature 2004 (ICMP Echo Request) and ping past the sensor. That should generate an alert. You can confirm on the sensor CLI with the "show event alert past 01:00" to see the alerts in the past hour.</P></BODY></HTML> Thu, 17 Apr 2008 19:11:54 GMT rhermes 2008-04-17T19:11:54Z AIP-SSM log to a SIM https://community.cisco.com/t5/network-security/aip-ssm-log-to-a-sim/m-p/968692#M80285 <P>We currently have a 3-party SIMS and Snort/tipppoint IDS in the network. Testing the Cisco module to replace these IDS systems, questions is how to config the Cisco module to forward events to the SIMS. thx</P> Sun, 10 Mar 2019 11:04:06 GMT https://community.cisco.com/t5/network-security/aip-ssm-log-to-a-sim/m-p/968692#M80285 wfleenor 2019-03-10T11:04:06Z Re: AIP-SSM log to a SIM https://community.cisco.com/t5/network-security/aip-ssm-log-to-a-sim/m-p/968693#M80286 <HTML><HEAD></HEAD><BODY><P>You didn't mention what SIM you're using. The AIP-SSM, IDSM and 4200 series sensors report events using SDEE. The sensor runs as the host and the SIM as a client. If your SIM supports Cisco's implementation, put your SIM's IP address in the allowed hosts on the AIP-SSM and give your SIM the sensor's readonly account credentials.</P></BODY></HTML> Wed, 16 Apr 2008 14:52:40 GMT https://community.cisco.com/t5/network-security/aip-ssm-log-to-a-sim/m-p/968693#M80286 rhermes 2008-04-16T14:52:40Z Re: AIP-SSM log to a SIM https://community.cisco.com/t5/network-security/aip-ssm-log-to-a-sim/m-p/968694#M80287 <HTML><HEAD></HEAD><BODY><P>The SIM is Qradar and it supports Cisco devices, is there a way to send test log or traffic to the SIM after configuring? </P></BODY></HTML> Thu, 17 Apr 2008 17:22:44 GMT https://community.cisco.com/t5/network-security/aip-ssm-log-to-a-sim/m-p/968694#M80287 wfleenor 2008-04-17T17:22:44Z Re: AIP-SSM log to a SIM https://community.cisco.com/t5/network-security/aip-ssm-log-to-a-sim/m-p/968695#M80288 <HTML><HEAD></HEAD><BODY><P>Enable signature 2004 (ICMP Echo Request) and ping past the sensor. That should generate an alert. You can confirm on the sensor CLI with the "show event alert past 01:00" to see the alerts in the past hour.</P></BODY></HTML> Thu, 17 Apr 2008 19:11:54 GMT https://community.cisco.com/t5/network-security/aip-ssm-log-to-a-sim/m-p/968695#M80288 rhermes 2008-04-17T19:11:54Z