suschoud Wed, 03/07/2007 - 07:15
User Badges:
  • Gold, 750 points or more

Concerning configuring SNMP on the sensor, I recommend doing this via

the IDM (https) method of configuring the sensor. You can find the

documentation on configuring SNMP via IDM here:


http://www.cisco.com/en/US/products/hw/vpndevc/ps4077/products_configura

tion_guide_chapter09186a00804cf4c9.html


Here's the SNMP configuration information from the CLI configuration

guide (it lists the MIBs you need for a third-party SNMP server, check

the end of the document for the MIB info):


http://www.cisco.com/en/US/products/hw/vpndevc/ps4077/products_configura

tion_guide_chapter09186a008055df87.html


Here's the link to the full IDM configuration guide:


http://www.cisco.com/en/US/products/hw/vpndevc/ps4077/products_configura

tion_guide_book09186a008055de07.html


Here's the link to the full CLI configuration guide:


http://www.cisco.com/en/US/products/hw/vpndevc/ps4077/products_configura

tion_guide_book09186a008055dbb1.html


Let me know if you encounter any problems with these procedures.


Please rate if this helps.


Sushil

Cisco TAC


sanbhardwaj Wed, 03/07/2007 - 08:12
User Badges:

hi,


thanks, but none of the above link is working


please suggest me.u can use phone also


Regards,

Sanjeev Bhardwaj

+91-9311755965


suschoud Wed, 03/07/2007 - 08:58
User Badges:
  • Gold, 750 points or more

hi,


u clicked on the first line.there's some stuff below that too.please copy the full like n try...

vitripat Wed, 03/07/2007 - 09:01
User Badges:
  • Gold, 750 points or more

If you are looking for sending IPS events from SSM module to a syslog server, unfortunately, thats not possible. IPS is not designed to send events to a syslog server. It works on RDEP protocol under which a event viewer server is supposed to pull the events from the IPS. So what actually you need is a Event Viewer. This can either pull the events realtime or based on the time duration. However, SSM module has very less amount of memory to store the events. So it would be better if we have a IEV which maintains a constant connection to the SSM module and pulls events frequently.


Regards,

Vibhor.

Actions

This Discussion