Host IDS

[sachinraja]

Hello.. i have some queries with respect to HIDS. I have a VMS server running CSA MC. I have a windows server running the agent. Now, this agent is synchronised with the CSA MC. I have added the CSA MC on the sec mon event viewer. When i open the security monitor, I get only application specific events like audit logs.. i dont see any signature specific attacks .. what do I need to do to see this ?

Doesnt the HIDS agent serve to stop network or application specific attacks onto the server ?

[pcomeaux]

Yes it does stop attacks but CSA does not have signatures since it is not a signature based product.

I prefer to view the CSA events within CSA MC instead of Security Monitor.

Have you tried viewing the events within CSA MC from Monitor --> Event Viewer?

thanks

peter