simple IDS solution with 4215

[r.perera]

Pls help me to find a simple IDS solution using a 4215, do I need CSA installed in each server in my protected LAN segment.

The way I understand is the CSA is part of HIPS solution, of course I could combined HIPS and NIDS but do I have to. Cisco IDS bundle (IDS4215-CSA-BUN-K9 Threat Prevention Starter Kit : 4215, CSA, CTR, VMS) combined both.

Can I just use 4215, CTR and VMS with event monitor to introduce signature based NIDS solution

Thanks and Regards

[a.arndt]

Quote: Can I just use 4215, CTR and VMS with event monitor to introduce signature based NIDS solution?

Absolutely. You'll just end up doing nothing with the 10 CSA Desktop Agent licenses that came with the bundle. You can use them later, if you want, or just let them collect dust. It's your call.

The only thing to keep in mind is that if you think you'll ever use those CSA licenses, you'll have to make sure that you keep the SMARTnet support current...

I hope this helps,

Alex Arndt