cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
388
Views
3
Helpful
4
Replies

IPS recomendation

Hi Netpros,

I would like to implement IPS solution in our company along with Management software to manage IPS boxes. What is the latest version of Cisco Management software i should deploy. Will it be compatible with IDS?

Thanks in advance.

3 Accepted Solutions

Accepted Solutions

fzamora
Cisco Employee
Cisco Employee

You can implement Cisco VMS 2.3 which has the CiscoWorks Management Center for IDS Sensors

For more information please check http://www.cisco.com/en/US/partner/products/sw/cscowork/ps2330/products_qanda_item09186a008009253c.shtml

Hope it helps

Franco Zamora

View solution in original post

to addition to that, make sure your version of MC for IDS/IPS is compatible with whatever version of software you end up w/ on your IPS appliances.

Depending on how many IPS appliances you deploy, IDM (the web gui) might be good enough for you, along with an snmp server. the VMS security monitor is good though for generating generic reports, and for emailing IPS alerts to you.

View solution in original post

mhellman
Level 7
Level 7

If you're only deploying a couple sensors, you should consider managing the sensors directly and spending the money you would have spent on VMS to buy a CSMARS appliance. CSMARS is far from perfect, but it's at least as good as VMS for monitoring/reporting. The CSMARS appliance will collect and present the IPS alarms to you, as well as events from a bunch of other far more useful systems (like windows event logs, etc).

View solution in original post

4 Replies 4

fzamora
Cisco Employee
Cisco Employee

You can implement Cisco VMS 2.3 which has the CiscoWorks Management Center for IDS Sensors

For more information please check http://www.cisco.com/en/US/partner/products/sw/cscowork/ps2330/products_qanda_item09186a008009253c.shtml

Hope it helps

Franco Zamora

to addition to that, make sure your version of MC for IDS/IPS is compatible with whatever version of software you end up w/ on your IPS appliances.

Depending on how many IPS appliances you deploy, IDM (the web gui) might be good enough for you, along with an snmp server. the VMS security monitor is good though for generating generic reports, and for emailing IPS alerts to you.

mhellman
Level 7
Level 7

If you're only deploying a couple sensors, you should consider managing the sensors directly and spending the money you would have spent on VMS to buy a CSMARS appliance. CSMARS is far from perfect, but it's at least as good as VMS for monitoring/reporting. The CSMARS appliance will collect and present the IPS alarms to you, as well as events from a bunch of other far more useful systems (like windows event logs, etc).

Patrick Laidlaw
Level 4
Level 4

Hello,

If your looking for Host IPS there is Cisco Security Agent 5.0. The management center works on Cisco Works VMS 2.3.

CSA MC 5.1 and 5.2 supposedly is comming out soon.

Patrick

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: