management system for IDS/IPS

Unanswered Question
May 22nd, 2009
User Badges:

Hi,


I would like to know if there is a management tool for IDS/IPS. I know there is ASDM for FW. Could I use this?


Thank you in advance.


Regards.


Giuseppe

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
clausonna Fri, 05/22/2009 - 06:23
User Badges:
  • Bronze, 100 points or more

It depends on how many IPS sensors you need to manage. If its just one, you can use IDM, but you're probably better off with IME (IPS Manager Express) which can manage up to 5 sensors.


I use CSM (Cisco Security Manager) to manage 15+ sensors. It lets me share the same policies, event action filters, and other settings across all devices, and the same for ASA firewalls.


IME is free. You have to pay for CSM.


cisco.com/go/csmanager


rhermes Fri, 05/22/2009 - 07:25
User Badges:
  • Gold, 750 points or more

If you want to try out CSM, it intalls with a 60 or 90 day trial license.

Keep in mind that CSM is device management only, it will not do any work on the alerts your sensors generate. Cisco would like you to but MARS for that, but IME will perform the device management and event handleing functions for up to 5 sensors.

Actions

This Discussion