How to configure ASA IPS modules to be monitored by CSM?

[zizaziza011]

I have CSM 4.10 for managing my Cisco security devices. What do I need to do on ASA IPS module and CSM, so ASA IPS modules will be properly monitored by CSM? (dashboard widgets, event viewer, heath monitoring and rest).

Thank you in advance!

[Marvin Rhoads]

There is a wealth of information provided in great detail in the User Guide.

Please refer to it here:

http://www.cisco.com/c/en/us/td/docs/security/security_management/cisco_security_manager/security_manager/410/user/guide/CSMUserGuide/ivman.html#pgfId-511988

[zizaziza011]

Thank you Marvin. I already did all of the following from User Guide you provided. However, I still cannot see ASA IPS events and information in IPS related dashboard widgets. Is it necessary to have SNMP communication enabled for this?

[Marvin Rhoads]

The transfer from IPS Sensor to CSM is via SDEE protocol.

Since CSM runs on a Windows server, you can easily do a Wireshark packet capture to confirm whether or not the transfer is taking place.

The TAC might be a good resource as looking at it interactively is probably the most effective troubleshooting method.