Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

Shunning server

What files and entries need to be configured for a sensor to forward shunning requests to another sensor? Thanks in advanced.

4 REPLIES

Re: Shunning server

Often times complex configuration issues are best addressed in an interactive session with one of our trained technical assistance engineers. While other forum users may be able to help, it’s often difficult to do so for this type of issue.

To utilize the resources at our Technical Assistance Center, please visit http://www.cisco.com/tac and to open a case with one of our TAC engineers, visit http://www.cisco.com/tac/caseopen

If anyone else in the forum has some advice, please reply to this thread.

Thank you for posting.

Cisco Employee

Re: Shunning server

New Member

Re: Shunning server

All I found was:

If you are using the UNIX Director, you must also make some other settings. The appropriate auths, routes, and hosts files have to be updated on both the client and server Sensors in order to support IDS communications. See the IDS management documentation at the following websites to configure shun servers and clients:

I then followed the link to the user guide, and there was nothing referencing the necessary file adjustments needed for shunning server and client.

Thanks

Tom

Cisco Employee

Re: Shunning server

Using the director, modify the hosts and routes and auths files on the 2 sensors (both the client and the server). Then set up the server/client, the sensors will be selectable as options.

145
Views
0
Helpful
4
Replies