IME initial setup. - account details

[desaijaimin]

Hi ,

I am not sure about some of the questions I am being asked by IME whilst I am trying to add a device.   I currently have "viewer" privilleges on the IPS sensor. So I thought that at least I could add a IPS sensor on my copy of IME on my desktop.  I have attached the screenshot and I am not sure what I need to put in for Configuration username and even subscription user name.  

Main admin account is already setup on the sensor and I am not the main admin.   Do I need to get the main administrator to add the IPS sensor to my copy of IME?  I will not be configuring the device to start with, I only need to monitor it for false positives. I am hoping that by using viewer privilleges I can monitor it. I can do that in IDM but I want to use IME instead. 

Thanks. Regards.

[haivrajesh]

You have to use subs username and password to view this

Rajeswar

[desaijaimin]

Thank you for your reply.  You mean the CCO credentials?  Please kindly clarify.  Regards.

[desaijaimin]

Let me try to clarify, as it can be seen in the attached image. Its asking for configuration user name and password?  I only have viewer account on this IPS. Where can I get the configuration username and pw? Thanks.

[desaijaimin]

bump.  Can anyone offer any suggestion please.. Thanks. Regards.

[desaijaimin]

Hi, Please has anyone got any info. on this?  Screen shot is attached in first post. I now have full admin account on IPS and still not able to get pas this screen?

How do I log a call with cisco?  It looks like I will have to log a call to cisco about this one.  Will it cost us anything? we have been a subscription licence for the IPS.  Do we get free support?

Thanks. Regards

[rhermes]

Jaimin

To add a sensor in IME you only have to enter the follwoing info:

Sensor Name (anythign you want to name this sensor)

IP Address (the IP address of the Sensor)

Configuration User Name (the user name you created on your sensor, default was cisco)

Configuration Password (the password you created for this account on the sensor, default was cisco)

You don;t need to enter the event subscription information unless you want your sensor to be automaticly updated.

- Bob

[desaijaimin]

Thanks Bob.. For some reason its not working. Is there anyway this original config username and pw be changed on the IPS? 

Thanks once again and have a great weekend.

[desaijaimin]

I even changed the password associated with username cisco but still no joy.  Error that I am getting is  "could not verify username/password [null] . 

Any idea? Thanks. Regards

[rhermes]

Can you ssh into your sensor? If you can, use that user name and password. If you do not have the user name and password, and you have permission, you need to perform a password recovery.

- Bob

[mark.barrett]

Instructions can be found at the following link:

http://www.cisco.com/en/US/docs/security/ips/7.1/configuration/guide/ime/ime_devices_list.html#wp1045691

The user credentials you are giving are the ones which are associated with the IPS device you want to monitor. It has nothing to do with CCO.

Also, you will need to make sure the device is allowing access from your particular host.

You use the Allowed Hosts/Networks pane to specify hosts or networks that have permission to access the sensor.

http://www.cisco.com/en/US/docs/security/ips/7.1/configuration/guide/ime/ime_setup.html#wp1219582