cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
240
Views
5
Helpful
2
Replies

I need your help

rzcisco
Level 1
Level 1

hi engineers ,

i setup IDS along with CSPM ,managed them and configure proper host IDs and ORG IDs and so on .

i think everything is ok ,i can ping the sensor .

but i cann't touch what is sensed in my database ,it is always empty with only three lines ,the last one is "route up "

any comment ,mostly appreciated !

thanks

2 Replies 2

jeff.k
Level 1
Level 1

If you have connectivity (i.e. seeing the route up), it may just be that you haven't told the sensor what interface to sniff on.

In CSPM, do a File>Save&Update. Then, go to the Command Tab, and do an "approve now" to push your config out to the sensor.

See the following doc for more details/troubleshooting:

Configuring a Cisco Secure IDS Sensor in CSPM

http://www.cisco.com/warp/public/707/ids2cspm_6117.html

HTH

Jeff

thank u very much ,

at least you said some word .

ciao