About mattleayr

mattleayr · 12-11-2013

Hi,Can anyone confirm fo me whether it's possible to send syslog messages from routers running IOS firewall feature set to CSM, so that the events appear in CSM Event Manager, similar to the way that ASA's do?I've setup one of my routers to do this a...

mattleayr · 03-21-2012

We have an ASA5585-X with SSP-10 module installed that we are testing. The firewall's outside interface is connected to the internet and has a public address. We have CSM 4.2 installed and are sending events from the IPS to it.After we configured the...

mattleayr · 12-11-2013

It would be GREAT to be able to do this for custom/scheduled reports, but as far as I know it isn't possible.Have you tried using Event Manager to do what you are asking?Go to Firewall Traffic Events->View Settings->Add->Source then add the IP you ar...

mattleayr · 12-11-2013

Hi,I'm not sure that I can really help you, but I can verify that on my CSM 4.5 server which is running normally, that service has a starup type of automatic and is in the "Started" state.You may want to check your system and application event logs t...

mattleayr · 10-15-2012

johnnylingo - did youresolve this problem - was it a hardware issue?I'm seeing the same on a standby supervisor 32 running a similar version of code to you - 12.2(33)SXH2a

mattleayr · 03-23-2012

Thanks for the replies.So if there was a DOS attack occurring on the outside interface (possibly saturating our internet link) and the DOS traffic was being dropped by the ACL, IPS would have no visibility of that??

mattleayr · 03-23-2012

Hi,I'm aware of that - we have the policy map configured.We're getting very few alerts from IPS - I was expecting more, as the outside interface has a public IP address and there are scans, probes etc happening all the time.Let me put my question a ...

Member Since	‎03-21-2012 02:26 PM
Date Last Visited	‎10-24-2018 02:38 PM
Posts	8

User Statistics

User Activity

CSM 4.5 Event Manager for IOS firewall on routers?

What traffic gets copied to IPS Module??

create CSM custom firewall reports

Cisco Security Manager 4.5 Daemon Manager service started and th

Tracebacks In Router Logs

What traffic gets copied to IPS Module??

What traffic gets copied to IPS Module??