IDS alert
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
02-07-2005 02:37 AM - edited 03-10-2019 01:16 AM
Hi All,
I going to install 3 IDSs on my corporate network, can I configure these IDSs to alert administrator only when more than 2 of the IDSs dectect the same signature?
If this can be done, how do I configure, any extra monitoring tool needed?
regards,
joe
- Labels:
-
IPS and IDS
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
02-07-2005 07:14 AM
This is where a SIMS (aka - Security Information Management System) comes in.
I believe Cisco offers what is essentially a rebranded NetForensics SIMS solution that will undoubtedly do this exact thing for you. SIMS products from other vendors will surely do this as well...
I'm sorry I can't offer more specifics but I don't run the Cisco SIMS. In any case, I hope this helps.
Alex Arndt
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
02-08-2005 12:05 AM
Thanks for the information, Alex.
