IOS with FW/IDS

[danish.saeed]

Hello

We have a 3640 box and we recently upgraded the IOS with FW/IDS. However our vendor told us that in order to configure IDS on our perimeter router, we need to purchase CSPM. Could'nt we configure IDS on the router with a Syslog server or we need to purchase CSPM.

Any help would be highly appreciated.

Thanx

Danish

[marcabal]

The configuration of IDS on the IOS Firewall is done directly in the router CLI.

So CSPM is not needed for configuration.

The viewing of the alarms generated by IDS on the IOS Firewall can be done through either syslog, or through the Cisco postoffice protocol.

To use postoffice, you would need to use CSPM (or better yet the Monitoring Center for Security which is part of the VPN and Securitry Management Solutions bundle of products).

BUT if you don't want to use the postoffice protocol, you can configure it to do just standard syslog messages in which case any syslog server should work.