Reg. Cisco IDS Sensors

Unanswered Question
Apr 8th, 2008
User Badges:


Hi All,


I have a query regarding Cisco IDS Sensors (Version 4.1(4), IDS 4235).I want to update the signatures via MC(Management center) for IDS Sensors .Do i need to purchase it or it is a tool which i can download from Cisco site and install on any windows server and start managing the sensors ? Also if i need to generate a report of Top 10 Attacks , Top 10 Signatures from IDS how can i do the same .


Regards

Ankur

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
rhermes Tue, 04/08/2008 - 08:34
User Badges:
  • Gold, 750 points or more

You do not need to purchase VMS-MC to update your sensors. VMS does run for a 90 day tiral peroid, if you do wish to download and try it out. VMS has been replaced with CSM (for the MC functionality) and MARS (for the SecMon functionality). VMS will still work with version 4.x and 5.x sensors (but not 6.x), and VMS SecMon will give you the reports your looking for.


The current version of sensor software (4.x) has not had any signature updates for about 18 months. If you have a CCO account, you can download version 5.1.7E1 upgrade (you put it on an FTP server and run the "upgrade ftp://user@/IPS-K9-5.1-7-E1.pkg" at the sensor's CLI). here: http://www.cisco.com/cgi-bin/tablebuild.pl/ips5


or download the IPS-K9-cd-1.1-a-5.1-7-E1.iso image and burn yourself a CD to reformat your 4235 (all current settings will be lost). here: http://www.cisco.com/cgi-bin/tablebuild.pl/ips5-system


You can also download the 6.0(4) version software the same ways as above, Both 5.x and 6.x contain current signature packs to the date they were released (6.0(4)a is slightly more current). All downloads: http://www.cisco.com/kobayashi/sw-center/ciscosecure/ids/crypto/index.shtml


good luck

Actions

This Discussion