Solved

IDS Question

Posted on 2004-08-31
2
169 Views
Last Modified: 2010-04-17
Dear Experts

I have an IDS device, I got also a Evient viewer to see the Alarms,
my question is i can see the alarms with a different levels ( low, high, etc) how can i see the action that the sensor will take incase there is a high alams. i have event viewer and IDM.


Thanks
0
Comment
Question by:ibmas4002
2 Comments
 
LVL 79

Accepted Solution

by:
lrmoore earned 250 total points
ID: 11944995
The sensor will not take any actions. It only records/reports the events (that's why it is called a sensor)
Cisco Threat Response (CTR) runs on another server and can take designated actions in response to specified alarms.
Or, you need Cisco MVS running on a server that can integrate your firewalls and screening access routers to take actions based on specific alarms.
None of them are going to take any action that you do not specifically configure it to take.
0
 
LVL 2

Author Comment

by:ibmas4002
ID: 11945713
Thanks Irmoore,

but if i will will configure the blocking devices and other settings from the IDM, will I be able to set the actions?

see i have only the event viewer and the IDM, i dont have VMS, so can i manage our IDS.

Thanks for answer.


0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

The Cisco RV042 router is a popular small network interfacing device that is often used as an internet gateway. Network administrators need to get at the management interface to make settings, change passwords, etc. This access is generally done usi…
Tired of waiting for your show or movie to load?  Are buffering issues a constant problem with your internet connection?  Check this article out to see if these simple adjustments are the solution for you.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

914 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

14 Experts available now in Live!

Get 1:1 Help Now