ciscoworks SIMS appliance and CS IDS 4

[fbeausoleil]

Hi,

anyone has experience with the sims appliance with the csids 4 agent. what exactly has to be configured on the appliance to connect to the ids.

Thanks

[smalkeric]

SIMS stands for Security Information Management Solution. It has many functions and features. IDS and IPS alarm can be configured to be sent to the SIMS for analysis.

Following are some of the very useful links relating to SIMS:

http://www.cisco.com/application/pdf/en/us/guest/products/ps5209/c1161/ccmigration_09186a008017dcbb.pdf

http://www.cisco.com/en/US/products/sw/cscowork/ps5209/products_qanda_item0900aecd802d295e.shtml

[ebatur]

Hello. Do you still have access to a Cisco SIMS Engine?

[wyley.johnson]

I don't have experience with the appliance, but I do with the software. I will assume that it is very similar. I apologize in advance if I am wrong.

From the web interface, open the SIMS desktop, open the administration console. Then browse to Component Options-->Boot Configuration-->-->CSIDS4 agent. Click on the 'Advanced' radio button and open the Data processor: Data1. Under the Protocol Adapter section, in the Adapter Parameters Table you can add your sensor information (IP, username/password, etc). You will probably want to create a user on your IDS that only has monitor privileges for SIMS to log into.

[ebatur]

Hello. Do you still have access to a Cisco SIMS Engine?

[ebatur]

Hello. Do you still have access to a Cisco SIMS Engine?