How to dowload IDS event viewer 4.1?

[nhuongpham]

Dear Sir,

I have IDS 4215 now I can access to IDM by IE6 but I don't know how to dowload IDS event viewer.

Can you help me,

Thanks very much

NhuongPham

[gfullage]

Download and install the "Full Install" package from here, then upgrade it to the S134 sig update on the same page:

http://www.cisco.com/cgi-bin/tablebuild.pl/ids-ev

[nhuongpham]

Thanks you but I'm only guest acount so I can't dowload it. Can You dowload and sent to my email address phamquyanh@yahoo.com.

This is the first time I configure IDS 4215 I don't know why CD not ship with IDS.

Thanks very much.

[a.arndt]

Q: (QUOTE)"Can You download and sent to my email address"

A: Sorry, but no. You can only obtain Cisco IDS downloads via CCO with both a valid account and a SmartNet support contract...

An interesting aside comes to mind, thanks to your post though.

Whatever happened to the page offering IEV as a download in IDM? There used to be a link to both the IEV client and the IEV signature updates in version 3.1 of IDM but this disappeared in version 4.0 and remains missing in version 4.1 as well.

Is there any reason why Cisco can’t put this feature back into IDM?

Alex Arndt

[marcabal]

The addition of IEV and the IEV signature updates made the sensor updates to large (sometimes doubling the size of the updates).

We have several customers that are monitoring sensors on a global network.

Many of the sensors are connected through low bandwidth connections.

The large updates were causing delays in getting signature updates loaded on these remote sensors.

It became a priority to reduce the size of the updates needing to be pushed to the remote sensors.

These customers are generally using Security Monitor rather than IEV because of the large number of sensors being managed.

So the customers who were not using IEV were having problem because of the additional IEV files having to be pushed to their sensors when they would never use these IEV files.

So it was decided to remove the IEV updates from the sensor updates and separately post these on CCO.

IEV customers were already having to make 2 downloads: the sensor update download from CCO, and the IEV download from the sensor.

So now both downloads are just made from CCO.

[a.arndt]

Thanks for the response Marcoa.

Being someone who is fully supportive of making updates as lightweight as possible, I should have seen this coming. I personally appreciate you filling us all in on the decision made by Cisco do drop the IEV updates out of the signature releases.

I guess the only thing that needs to be said now is that, at the end of the day, anyone running a Cisco IDS appliance had better purchase SmartNet if they want to keep themselves up-to-date (and legal...).

Alex Arndt