about IDS test.

[zoushan]

Hello,

I have currently deployed a ws-x6381-ids module with CSPM2.3i. The IDS is monitoring one port of a switch & the other is connected to a management VLAN.

I am now do some testing to verify whether our ids system work well and What the ids can do ?How can I do that?

[yusuff]

In order to test if your IDS is receiving alarms, you need to generate false alarms, for eg; you can configure CSPM that if someone pings i.e. 'icmp-echo' request, you should see a Level 5 alarm.

Modify the signature database on CSPM for the echo-request signature to Level 5 and then push the config to sensor. Then do a ping test and check the Event Viewer if you see Level 5 alarms.

HTH

R/Yusuf