Looking for IDS/IPS event list

[gdntsoc]

Could someone point me at a document repository that list all possible events which could be issued by a CISCO IDS NETWORK MODULE FOR CISCO 2800 SERIES ROUTERS (NM-CIDS-K9)

Thanks in advance,

[jlimbo]

The NM-Module runs Sensor OS so the signatures available will depends on what Signature level you have applied. The latest signature version is S211.

All signatures available can be accessed here:

http://tools.cisco.com/MySDN/Intelligence/allSignatures.x

[gdntsoc]

Just to confirm, this would mean that NM-Module would have the same events as a standalone appliance such as Cisco IDS-4215.

[marcabal]

99% of the time yes when both are running the same version and sig level.

The less than 1% exception is because the IDS-4215 is capable of running in both Promiscuous and InLine mode, but the NM-CIDS is currently limited to InLine mode. So there are a small set of signatures on a IDS-4215 that will only fire when run in InLine mode, and so will not be seen on a NM-CIDS.