Solved

IDS Question

Posted on 2004-08-31
2
175 Views
Last Modified: 2010-04-17
Dear Experts

I have an IDS device, I got also a Evient viewer to see the Alarms,
my question is i can see the alarms with a different levels ( low, high, etc) how can i see the action that the sensor will take incase there is a high alams. i have event viewer and IDM.


Thanks
0
Comment
Question by:ibmas4002
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 79

Accepted Solution

by:
lrmoore earned 250 total points
ID: 11944995
The sensor will not take any actions. It only records/reports the events (that's why it is called a sensor)
Cisco Threat Response (CTR) runs on another server and can take designated actions in response to specified alarms.
Or, you need Cisco MVS running on a server that can integrate your firewalls and screening access routers to take actions based on specific alarms.
None of them are going to take any action that you do not specifically configure it to take.
0
 
LVL 2

Author Comment

by:ibmas4002
ID: 11945713
Thanks Irmoore,

but if i will will configure the blocking devices and other settings from the IDM, will I be able to set the actions?

see i have only the event viewer and the IDM, i dont have VMS, so can i manage our IDS.

Thanks for answer.


0

Featured Post

Get HTML5 Certified

Want to be a web developer? You'll need to know HTML. Prepare for HTML5 certification by enrolling in July's Course of the Month! It's free for Premium Members, Team Accounts, and Qualified Experts.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Hello , This is a short article on how would you go about enabling traceoptions on a Juniper router . Traceoptions are similar to Cisco debug commands but these traceoptions are implemented in Juniper networks router . The following demonstr…
How to set-up an On Demand, IPSec, Site to SIte, VPN from a Draytek Vigor Router to a Cyberoam UTM Appliance. A concise guide to the settings required on both devices
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Suggested Courses
Course of the Month8 days, 3 hours left to enroll

617 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question