CSPM versus IDM/IEV

[paul.knoll]

Does anybody know what the future of CSPM will be?

Is it a good choice to switch to IDM/IEV or shall we continue to work with the CSPM?

Best regards

Paul Knoll

[duchesne_ced]

it depends :-)

For configuring the sensor, IDM is more powerfull than CSPM thanks it's ability to fine tune the sensor.... It's very easy.

For monitoring, if you have only 3 devices or less, i would propose IEV. Why ? because IEV provide some nice features like 'acknowledgment' of alarms, multiple view and IEV provides a stable database (MySQL). This also provides a way to write your own SQL queries and execute report against the DB

If you have more IDS... no choice, wait for IDS-MDC

[marcabal]

CSPM or the Unix Director are still the recommended tools when configuring and monitoring more than 3 sensors.

IDM/IEV are meant for small 1 to 3 sensor deployments.

If you like the additional functionality of IDM, but have more than 3 sensors, then you can use IDM for configuration, and CSPM (or Unix Director) for alarm viewing for now.

For the future of IDS Management Tools for the Enterprise (i.e. more than 3 sensors) then please contact your Cisco Representative.