SDEE collector and sdee url

[mulhollandm]

folks

i have a non-cisco sdee collector trying to get events from my asa5540 (aip-ssm-20)

the collector's IP is in the acl on the aip-ssm

https://10.x.x.x/cgi-bin/sdee-server

if i https to the url i get a prompt but once i logon, and i can see the account being authenticated, there's nothing behind the url

i've tried a

wget --http-user=xxxxxxxxxx --http-passwd=xxxxxxxx https://10.x.x.x/cgi-bin/sdee-server

wget --http-user=xxxxxxxxxx --http-passwd=xxxxxxxx --no-check-certificate https://10.x.x.x/cgi-bin/sdee-server

from the collector but i get a connection refused

can anyone confirm if i'm using the correct url please?

[svaish · Accepted solution]

Please take care of the following

-          on the IPS side you only need to make sure that the reporting
servers IP addresses are included in the access control lists.

-          on the reporting server side you need to specify; the IP address
of the IPS appliance, the username and password of the IPS appliance, and
the protocol you're server is going to use to get the alerts from the
appliance (TCP/443).

[mulhollandm]

svaish

many thanks for your reply

the collector is on the acl ok and its configured with the management ip of the aip-ssm, a username and password and sdee as the relevant protocol

i've a bit of configuration still to do but i'm getting an error on the collector but it may be an issue on it as its not a cisco box

thanks for your reply