Event viewer for Cisco Pix 515 and IDS IOS 3600 series Router

pavlosd · ‎05-31-2003

I was wandering if there is available any IDS Event viewer (preferably a free one) that can be used for monitoring the alarms triggered on a Pix firewall and cisco router.

I.e. Can the IEV be used? If yes, what do I need to configure on the Firewall and Router?

Is there any other software for configuring (using GUI and not CLI) the alarms and signiture triggering?

Regards.

ywadhavk · ‎05-31-2003

Hi,

The IDS appliance and the PIX firewall each has a free management software on it. The IDS has an additional piece of software that is called the Event Viewer. This will receive the alarms and display them.

But I guess, in your case, you are looking for implementing IDS feature on PIX and the router.

Both the router and PIX IDS implementation can send send the events to a syslog server.

Hope this helps.

Thanks,

yatin

habgooda · ‎05-31-2003

Another good method for monitoring and alarming is to use a syslog demon (Kiwi syslog is very good) and filter on %4000 events - In the PIX error codes, these are defined as the IDS events.