Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

can someone guide me on how to add IDS onto CSM and then forward the IDS related alerts/logs to SIEM tools

We have a requirem,ent of adding IDS to CSM and then forward the IDS related logs to SIEM tool . Please suggest

Everyone's tags (3)
1 REPLY
Gold

can someone guide me on how to add IDS onto CSM and then forward

You can use these instructions to add a IPS sensor to CSM (they haven't changed much since 3.x) if you need better or more current instructions, hit the "HELP" link on your CSM screen:

http://www.cisco.com/en/US/partner/products/ps6498/products_tech_note09186a0080846d67.shtml

CSM does not forward events, but you CAN connect your SIEM directly to your sensor if your SIEM has an SDEE client. The sensor can support up to 4 or 5 simultaneous clients, providing each of them an event feed. (the IPS Sensor is an SDEE server)

- Bob

403
Views
0
Helpful
1
Replies