02-21-2006 02:39 AM - edited 03-10-2019 01:53 AM
Hi Netpros,
I would like to implement IPS solution in our company along with Management software to manage IPS boxes. What is the latest version of Cisco Management software i should deploy. Will it be compatible with IDS?
Thanks in advance.
Solved! Go to Solution.
02-21-2006 09:12 PM
You can implement Cisco VMS 2.3 which has the CiscoWorks Management Center for IDS Sensors
For more information please check http://www.cisco.com/en/US/partner/products/sw/cscowork/ps2330/products_qanda_item09186a008009253c.shtml
Hope it helps
Franco Zamora
02-22-2006 12:24 PM
to addition to that, make sure your version of MC for IDS/IPS is compatible with whatever version of software you end up w/ on your IPS appliances.
Depending on how many IPS appliances you deploy, IDM (the web gui) might be good enough for you, along with an snmp server. the VMS security monitor is good though for generating generic reports, and for emailing IPS alerts to you.
02-24-2006 12:25 PM
If you're only deploying a couple sensors, you should consider managing the sensors directly and spending the money you would have spent on VMS to buy a CSMARS appliance. CSMARS is far from perfect, but it's at least as good as VMS for monitoring/reporting. The CSMARS appliance will collect and present the IPS alarms to you, as well as events from a bunch of other far more useful systems (like windows event logs, etc).
02-21-2006 09:12 PM
You can implement Cisco VMS 2.3 which has the CiscoWorks Management Center for IDS Sensors
For more information please check http://www.cisco.com/en/US/partner/products/sw/cscowork/ps2330/products_qanda_item09186a008009253c.shtml
Hope it helps
Franco Zamora
02-22-2006 12:24 PM
to addition to that, make sure your version of MC for IDS/IPS is compatible with whatever version of software you end up w/ on your IPS appliances.
Depending on how many IPS appliances you deploy, IDM (the web gui) might be good enough for you, along with an snmp server. the VMS security monitor is good though for generating generic reports, and for emailing IPS alerts to you.
02-24-2006 12:25 PM
If you're only deploying a couple sensors, you should consider managing the sensors directly and spending the money you would have spent on VMS to buy a CSMARS appliance. CSMARS is far from perfect, but it's at least as good as VMS for monitoring/reporting. The CSMARS appliance will collect and present the IPS alarms to you, as well as events from a bunch of other far more useful systems (like windows event logs, etc).
02-24-2006 02:00 PM
Hello,
If your looking for Host IPS there is Cisco Security Agent 5.0. The management center works on Cisco Works VMS 2.3.
CSA MC 5.1 and 5.2 supposedly is comming out soon.
Patrick
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: