CSM and how it works with 42XX

[william.menzie]

I was wondering how you added Cisco 42XX to the CSM. Is there a guide that outlined how the 42XX has to be configured prior to adding them. Additionally, if the CSM is not the software that I should be using to manage a group of servers what software should I be using?

[rhermes]

CSM is the current supported management platform for IPS Sensors. VMS Still works, but it will not support 6.x sensors, ASA's or anything else new.

If you're just starting with CSM, you may want to wait until 3.1 is released on Arpil 24th, otherwise you might be duplicating your efforts, standing up a 3.0.1 CSM server, only to have to do it all over again for 3.1 (I havn't seen the upgrade/migration yet, but I'm planning for the worst, and rarely dissapointed).

Your default configuration on the sensor is fine (ssh enabled), just make sure you have the CSM IP address in your allowed hosts, and your time is set properly in addition to the obvious things like IP address, gateway, etc

[scottyd]

So are you saying that if we upgrade to 6 we have to use CSM? Does that mean that we have to purchase it? And our VMS becomes redunant. We used VMS to build reports on a PIX and IPS, threats, attacks and alerts etc. Does CSM do all this also?

Thanks.

[avang2004]

No CSM is only for configuration and policy mgmt of IPS devices

If you have SAS you can upgrade free to CSM.

for reporting, logging, monitoring you will need CS-MARS or you can use IPS Event viewer which is a client install on each workstation and very limited reporting

CSM 3.1 FAQ

http://www.cisco.com/en/US/products/ps6498/products_qanda_item0900aecd8062c022.shtml

CS-MARS FAQ

http://www.cisco.com/en/US/products/ps6241/products_qanda_item0900aecd802b7c6b.shtml