IPS-ME - Remote Monitoring - Running server on workstation for monitoring..

jdenis · ‎06-09-2008

Hi,

Is there any way to use IPS-ME on a remote windows workstation for monitoring.

I have 5 sensors that I want to configure with IPS-ME on a windows 2k3 server. The server will be in the Data Center and it will be use to config and monitor the sensor alerts.

I am wondering how the users will be monitoring events since IPS-ME is not running on their workstation...

Is windows Remote Desktop to my IPS-ME server the only option?

Thanks,

JP

Farrukh Haroon · ‎06-09-2008

Remote Desktop, VNC etc. seems to be the only option. Unless you want to run multiple instances of IME, but this will be very resource intensive for your Sensors, Network, End-Systems and might severely degrade performance.

The best option is to get a Cisco MARS box and correlate all meaningful alerts in a single web browser, where all Security Admins can login and take relevant actions.

Regards

Farrukh