IDS alert

[bhteoh]

Hi All,

I going to install 3 IDSs on my corporate network, can I configure these IDSs to alert administrator only when more than 2 of the IDSs dectect the same signature?

If this can be done, how do I configure, any extra monitoring tool needed?

regards,

joe

[a.arndt]

This is where a SIMS (aka - Security Information Management System) comes in.

I believe Cisco offers what is essentially a rebranded NetForensics SIMS solution that will undoubtedly do this exact thing for you. SIMS products from other vendors will surely do this as well...

I'm sorry I can't offer more specifics but I don't run the Cisco SIMS. In any case, I hope this helps.

Alex Arndt

[bhteoh]

Thanks for the information, Alex.