Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

Can you use VMS to forward IDS alerts??/

Can someone explain where in the VMS IDS monitoring/management module I can set up director forwarding? We are migrating from an old Unix director configuration to VMS but need to forward alerts received by VMS to an NetForensics IDS agent so they can be loaded in NF's Database. I can't seem to find where I need to set this up in VMS. In the Unix director configs it was in the smid.conf file, is there an equivalent file or something in VMS.

Thanks

1 REPLY
Cisco Employee

Re: Can you use VMS to forward IDS alerts??/

Unfortunately, this feature is not available through VMS.x It is probably on the roadmap. But you could have the sensor send the events to multiple destinations rather than having the Security Monitor to forward the logs/events to the NF host.

From within IDSMC---> Settings---> Communications--->Remote Hosts.

Hope thsi helps.

Thanks,

yatin

84
Views
0
Helpful
1
Replies
CreatePlease to create content