Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

IPS recomendation

Hi Netpros,

I would like to implement IPS solution in our company along with Management software to manage IPS boxes. What is the latest version of Cisco Management software i should deploy. Will it be compatible with IDS?

Thanks in advance.

3 ACCEPTED SOLUTIONS

Accepted Solutions
Cisco Employee

Re: IPS recomendation

You can implement Cisco VMS 2.3 which has the CiscoWorks Management Center for IDS Sensors

For more information please check http://www.cisco.com/en/US/partner/products/sw/cscowork/ps2330/products_qanda_item09186a008009253c.shtml

Hope it helps

Franco Zamora

Gold

Re: IPS recomendation

to addition to that, make sure your version of MC for IDS/IPS is compatible with whatever version of software you end up w/ on your IPS appliances.

Depending on how many IPS appliances you deploy, IDM (the web gui) might be good enough for you, along with an snmp server. the VMS security monitor is good though for generating generic reports, and for emailing IPS alerts to you.

Gold

Re: IPS recomendation

If you're only deploying a couple sensors, you should consider managing the sensors directly and spending the money you would have spent on VMS to buy a CSMARS appliance. CSMARS is far from perfect, but it's at least as good as VMS for monitoring/reporting. The CSMARS appliance will collect and present the IPS alarms to you, as well as events from a bunch of other far more useful systems (like windows event logs, etc).

4 REPLIES
Cisco Employee

Re: IPS recomendation

You can implement Cisco VMS 2.3 which has the CiscoWorks Management Center for IDS Sensors

For more information please check http://www.cisco.com/en/US/partner/products/sw/cscowork/ps2330/products_qanda_item09186a008009253c.shtml

Hope it helps

Franco Zamora

Gold

Re: IPS recomendation

to addition to that, make sure your version of MC for IDS/IPS is compatible with whatever version of software you end up w/ on your IPS appliances.

Depending on how many IPS appliances you deploy, IDM (the web gui) might be good enough for you, along with an snmp server. the VMS security monitor is good though for generating generic reports, and for emailing IPS alerts to you.

Gold

Re: IPS recomendation

If you're only deploying a couple sensors, you should consider managing the sensors directly and spending the money you would have spent on VMS to buy a CSMARS appliance. CSMARS is far from perfect, but it's at least as good as VMS for monitoring/reporting. The CSMARS appliance will collect and present the IPS alarms to you, as well as events from a bunch of other far more useful systems (like windows event logs, etc).

Re: IPS recomendation

Hello,

If your looking for Host IPS there is Cisco Security Agent 5.0. The management center works on Cisco Works VMS 2.3.

CSA MC 5.1 and 5.2 supposedly is comming out soon.

Patrick

146
Views
3
Helpful
4
Replies
CreatePlease to create content