cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
413
Views
0
Helpful
1
Replies

Enabling SDEE on AIP-SSM

jbeltrame
Level 1
Level 1

I have an AIP-SSM on a 5510. I'd like to pull events via SDEE. How do I go about setting this up? I have read some docs to just add host to the allowed hosts list, and setup a readonly account.

1 Reply 1

rhermes
Level 7
Level 7

The SDEE Server is running all the time on the sensor. As long as you have your SDEE client's IP address in the allowed hosts, then you're all set. The SDEE client can use a read-only or admin account on teh sensor to log in. The sensor does not limit how many times a signle username has logged into the sensor (poor security we know). so you could use the same username you manage the sensor for your SDEE client.

Review Cisco Networking products for a $25 gift card