NSDB Security Database

[ron]

Is the NSDB database available online?

I currently get e-mail from my IDS Systems (NetRangers) and in the e-mail I get the SIGID# and SUBSIGID#.

However, I would like to be able to look at the NSDB from my desktop. I know that one solution is to install the Scanner on my desktop and I would have NSDB.

So is the NSDB somewhere online on Cisco's site?

Thanks,

Ron Pugh

CCNP, CCDP, CCNP-Security

[mcerha]

Actually, NetSonar has a significantly different NSDB than CSIDS. So, don't use that for looking up CSIDS alarms. There are two possibilities that can work for you.

1) Online (requires a CCO login)

http://www.cisco.com/go/csec

2) CSPM Signature Updates

You can get a copy of the NSDB in the CSPM signature updates. These are just ZIP files. So, all you need to do is uncompress the update, and then copy the 'html' directory to somewhere you'll remember.

[ronald.change]

I stuck this into my email messages and it allows me to link to the current database on my CSPM.

https://"cspm server name"/nsdb/html/expsig_${SigId}.html

just substitute the name or ip address for your cspm server into the line above

[8rpalmer]

Cisco does maintain a "Ciso Secure Encyclopedia" at the following link:

http://www.cisco.com/cgi-bin/front.x/csec/idsAllList.pl