Ips capability's

mialbert · ‎12-29-2011

I have a number of 18xx, 19xx, 28xx and 29xx isr's. I am wanting to know if someone makes any configuration changes to any of them. I have used what's up gold to send gather custom snmp traps and send email alerts when this happens and that works fine. I am also wanting to know if cisco ips will do the same thing, that is, send an alert when someone makes a configuration change on the isr.

rhermes · ‎01-03-2012

I do not think there are any configuration change traps on the IPS OS. You can check for yyourself"

The following private MIBs are supported on the sensor:

•CISCO-CIDS-MIB

•CISCO-PROCESS-MIB

•CISCO-ENHANCED-MEMPOOL-MIB

•CISCO-ENTITY-ALARM-MIB

Note MIB II is available on the sensor, but we do not support it. We know that some elements are not correct (for example, the packet counts from the IF MIB on the sensing interfaces). While you can use elements from MIB II, we do not guarantee that they all provide correct information. We fully support the other listed MIBs and their output is correct.

You can obtain these private Cisco MIBs under the heading SNMP v2 MIBs at this URL:

http://www.cisco.com/public/sw-center/netmgmt/cmtk/mibs.shtml

I think the most notification you could recieve would be to have the sensor externally authenticate all logins via RADIUS and have people only use the account with admin access when making changes.

- Bob