Ipsec between Sensor and CSPM v2.2

[mharitakis]

Hi,

I know that in new version 2.5 of Netranger,there is a feature for encrypted communication between Sensor and Director.Is it happens between Sensor and Cspm v2.2.

Thanks.

[marcabal]

To setup encrypted communication using IPSEC you should upgrade your 2.5 sensor from the base version of 2.5(0)S0.

Install the 2.5(1)S0 Service Pack (The service pack corrects a problem with IPSEC implementation)

I would also recommend upgrading to the latest signature update 2.5(1)S2.

The CSPM will also need to be upgraded from v2.2 to v2.3i to work with the 2.5(1)S0 service pack.

Marco

[silverm]

But this does not explain how to configure encrypted communication between a 2.5 sensor and a 2.2.2 director... any help?

[marcabal]

The configuration instructions are in the 2.2.2 User's Guide:

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/csids/csids5/csidscog/advanced.htm#93564

There are also some added requirements on the Unix Director to get IP SEC to work that are explained in the User's Guide:

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/csids/csids5/csidscog/install.htm

NOTE: IPSEC is only supported on Unix Directors running 2.2.2 on Solaris 2.8 machines.