ids sensor without SCPM

[a.youssef]

i'have à cisco sensor 4235, but i dont have with un soft for Director host (like CSPM or an other) .

please do you have any idea how to admin to vein and admin alarm witout those softs( CSPM over win 2000). for exemple is winsyslog is adequate to the situation

thinks a lot.

[wardwalk]

Hi,

I suggest using IDM (IDS Device Manager) to manage/configure your sensor. IDM is a web-based application that allows you to manage your sensor via a web browser. Here's a link to find more information about using IDM for IDS version 4.1:

http://www.cisco.com/en/US/partner/products/sw/secursw/ps2113/products_installation_and_configuration_guide_book09186a00801a0c31.html

To view the sensor alarms, you can use IEV (IDS Event Viewer). Here's a link providing instructions for downloading, installing, and using IEV:

http://www.cisco.com/en/US/partner/products/sw/secursw/ps2113/products_installation_and_configuration_guide_chapter09186a00801a0c5a.html

Note: The links above are for the latest version, 4.1(1).

[a.youssef]

thinks a lot what the account must i have to acces to download IEV

[wardwalk]

You need a Smartnet account with Cisco. Here's a link to more info about Smartnet:

http://www.cisco.com/en/US/products/svcs/ps3034/ps2827/ps2978/serv_home.html

Note: If your 4235 is running software version 3.x, then IEV can be downloaded from the sensor itself (via IDM). Otherwise (if it's running 4.x), you'll need to download IEV from Cisco.com according to the link I provided earlier (which requires a Smartnet account).

[a.youssef]

ok, using the IDM i can download the IEV without a Smartnet account (or any others accounts, is that what you mean in the second suggestion?

[wardwalk]

If your 4235 is running version 3.X, then yes you can use IDM to download IEV from the sensor itself and no other accounts/contracts/etc are needed.

If your 4235 is running version 4.X, then IEV does not exist on the sensor. So, you'll have to download via the link I provided above. To do that, you'll need a Smartnet account.

Hope that helps,

Ward.