IDS sensor appliance and SNMP management

[croue]

I have a sensor appliance with the latest release. Now, I want to administer it in snmp. Is it possible to congifure that in the sensor (I didn't find anything), or must I use a software like IDS director

I don't use VMS.

I have solaris.

[a.arndt]

Cisco IDS 3.x was able to support some SNMP functions, for example sending traps, but SNMP was never used to actually configure a sensor (IIRC).

Cisco IDS 4.x doesn't support SNMP usage for either reporting or configuration purposes as far as I know.

Now, if the issue here is "how do I manage my IDS sensor without using VMS from a Solaris host?", then the answer is actually quite simple. You can connect to the sensor using a browser from the Solaris box and use IDM (aka - IDS Device Manager). This is a web interface for configuring a Cisco IDS and all traffic is encrypted by default (just point your browser to https:// and login).

In order to view your alarms using something more useful than viewing the Event Store via IDM, you'll have to use IEV on a Windows 2000 workstation. If you don't have a Win2K box, then you're a little bit stuck WRT looking at IDS events. Of course, if you have a Win2K system and a valid SmartNet support contract, you could always obtain VMS Basic (for free!) and run that instead…

I hope this helps,

Alex Arndt

[flyingmunk]

Currently, there is no SNMP support, but I believe that with the next major release of IDS, 5.0, there will be support for SNMP.

Not sure when 5.0 is due out. First of '05 I think, but maybe one of the Cisco folks will chime in with a date, if not, check with your local Cisco office.

thanks,

chris