no IDS alarms firing?

[royrussell]

Hi, I have cisco 4235s on the outside and inside of my network. When I generate alarm reports for any of the IDSs, using Security Monitor, I do not get any data. I have all the high and medium signatures enabled.

Any help would be appreciated. Thanks.

[nkhawaja]

Hi,

First you need to check if senosr is actually seeing any traffic. and whether the sniffing interface is actually up.

"show interface" can tell you that

"show event alert" can tell you if senosr is getting alerts or not.

I hope you have proper span port configured on the switch you have this sensor connected.

thanks

Nadeem

[jtorkos]

I may be having the same problem. The Cisco 4215 sensor is not picking up any viruses or SMTP alerts. It seems to detect other events though. I have it connected to a Cat 4000. Does anyone know if there are any known issues with connecting the sensor to a Cat 4000?

Thanks in advance.

[xenonie]

Requesting investigation as IDS alarms are not firing. Urgent action required.