management system for IDS/IPS

gpangallo · ‎05-22-2009

Hi,

I would like to know if there is a management tool for IDS/IPS. I know there is ASDM for FW. Could I use this?

Thank you in advance.

Regards.

Giuseppe

clausonna · ‎05-22-2009

It depends on how many IPS sensors you need to manage. If its just one, you can use IDM, but you're probably better off with IME (IPS Manager Express) which can manage up to 5 sensors.

I use CSM (Cisco Security Manager) to manage 15+ sensors. It lets me share the same policies, event action filters, and other settings across all devices, and the same for ASA firewalls.

IME is free. You have to pay for CSM.

cisco.com/go/csmanager

rhermes · ‎05-22-2009

If you want to try out CSM, it intalls with a 60 or 90 day trial license.

Keep in mind that CSM is device management only, it will not do any work on the alerts your sensors generate. Cisco would like you to but MARS for that, but IME will perform the device management and event handleing functions for up to 5 sensors.