IPS /hips queery

cfajardo1_2 · ‎03-31-2007

hello,

my customer wanted to implement IPS on network as well as HIPS on servers. Aside from the network IPS device, what else do i need to complete the system running? (ie monitoring/management etc)

in HIPS, do i still need some management or monitoring also?

thanks.

tsteger1 · ‎04-01-2007

For Cisco HIPS on servers you can use the Cisco Security Agent.

Read more here:

http://www.cisco.com/en/US/products/sw/secursw/ps5057/products_data_sheet0900aecd805baf46.html

Tom

cfajardo1_2 · ‎04-02-2007

what do i need to manage single sensor and few CSA on servers. What to i need to view events and trigger alarms or send emails etc when there is an alarm.

thanks

tsteger1 · ‎04-02-2007

It sounds like you need the Management Center for Cisco Security Agent and Management Center for IDS Sensors.

http://www.cisco.com/en/US/products/sw/secursw/ps5057/products_configuration_guide_book09186a008067b6a5.html

http://www.cisco.com/en/US/products/sw/cscowork/ps3990/products_installation_guide_book09186a00801b0d69.html

TradeSecrets · ‎04-12-2007

Hi There,

You need at least on server to run the CSA-MC. Depending on environment you could need up to 3 servers.