ssm-10 real time monitoring

Answered Question

Is there a way to get real-time notifications on security events on a ssm module I have installed in my ASA? Are SNMP traps the only option? Also under the ASDM home/Intrustion Prevention page, the sensor health section has event retrieval marked as critical "not retrieved". How do I clear this? I've view the events on the module, and this does not clear it. Does this have to do with the MARS product??

I have this problem too.
0 votes
Correct Answer by Farrukh Haroon about 8 years 5 months ago

No problem at all, glad you have it working :)

Correct Answer by Farrukh Haroon about 8 years 5 months ago

You can use IME to monitor the IPS in real-time. It also supports real-time event management for five IPS devices. Have a look at it:

http://www.cisco.com/en/US/products/ps9610/index.html

http://www.cisco.com/en/US/prod/collateral/vpndevc/ps5729/ps5715/ps9610/data_sheet_c78-459033.html

It is freely available for all customers have a valid service contract. Make sure you are running 6.1.x code to utilize the performance management features of IME.

Regards

Farrukh

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (2 ratings)
Loading.
Correct Answer
Farrukh Haroon Thu, 08/07/2008 - 11:21

You can use IME to monitor the IPS in real-time. It also supports real-time event management for five IPS devices. Have a look at it:

http://www.cisco.com/en/US/products/ps9610/index.html

http://www.cisco.com/en/US/prod/collateral/vpndevc/ps5729/ps5715/ps9610/data_sheet_c78-459033.html

It is freely available for all customers have a valid service contract. Make sure you are running 6.1.x code to utilize the performance management features of IME.

Regards

Farrukh

netperception Mon, 08/11/2008 - 07:37

I am looking at this also. I follow the link that says 'download' but then it says that it cannot find the specified file. Anyone else having this issue?

Actions

This Discussion