ssm-10 real time monitoring

Answered Question

Is there a way to get real-time notifications on security events on a ssm module I have installed in my ASA? Are SNMP traps the only option? Also under the ASDM home/Intrustion Prevention page, the sensor health section has event retrieval marked as critical "not retrieved". How do I clear this? I've view the events on the module, and this does not clear it. Does this have to do with the MARS product??

Correct Answer by Farrukh Haroon about 8 years 10 months ago

No problem at all, glad you have it working :)

Correct Answer by Farrukh Haroon about 8 years 10 months ago

You can use IME to monitor the IPS in real-time. It also supports real-time event management for five IPS devices. Have a look at it:


http://www.cisco.com/en/US/products/ps9610/index.html


http://www.cisco.com/en/US/prod/collateral/vpndevc/ps5729/ps5715/ps9610/data_sheet_c78-459033.html


It is freely available for all customers have a valid service contract. Make sure you are running 6.1.x code to utilize the performance management features of IME.


Regards


Farrukh

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (2 ratings)
Loading.
Correct Answer
Farrukh Haroon Thu, 08/07/2008 - 11:21
User Badges:
  • Red, 2250 points or more

You can use IME to monitor the IPS in real-time. It also supports real-time event management for five IPS devices. Have a look at it:


http://www.cisco.com/en/US/products/ps9610/index.html


http://www.cisco.com/en/US/prod/collateral/vpndevc/ps5729/ps5715/ps9610/data_sheet_c78-459033.html


It is freely available for all customers have a valid service contract. Make sure you are running 6.1.x code to utilize the performance management features of IME.


Regards


Farrukh

netperception Mon, 08/11/2008 - 07:37
User Badges:

I am looking at this also. I follow the link that says 'download' but then it says that it cannot find the specified file. Anyone else having this issue?



Correct Answer
Farrukh Haroon Mon, 08/11/2008 - 08:50
User Badges:
  • Red, 2250 points or more

No problem at all, glad you have it working :)

Actions

This Discussion