Question, Should I upgrade to 6.0(4)E1 or 6.1(1)E1. If I go directly to 6.1(1)E1 do we need to load 6.0(4)E1 before ?
You are correct.
IME is more of a next generation of IEV rather than a CSM replacement.
It has several new event viewer features over what the older IEV had. And these are the biggest advantages of what IME provides.
But from a configuration aspect it is not a replacement of CSM, and does not have comparable features to CSM.
The configuration in IME is just the existing IDM screens built into IME. This way you can configure up to 5 sensors in the one window instead of having to open up 5 different IDM windows.
So IME is just to make configuration a little bit more easy for customers who were previously using IDM for configuration, and was not intended as a replacement for customers already enjoying the additional features of CSM.
So for true multi-sensor configuration you would want to stay with CSM.
However, using CSM in conjunction with IME is something that some users are trying out.
They use IME for event monitoring.
And use CSM for configuration management.
They may not use the IDM screens in IME for configuration management, but they do still take advantage of the IDM screens. The IDM screens in IME also offer better access to the dynamic data on the sensor (like deny lists, shun lists, and ip logs). They can also use it for trying out different temporary config settings when doing trouble shooting before making the final change in CSM and applying it to multiple sensors.
Also keep in mind that IME is not a replacement for MARS either. MARS is also an event viewer, but has many more features and capabilities than IME. But we are hearing of some customers who are considering using both MARS AND IME in order to take advatange of both tools features.