Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

sink hole & IDS

I want to know how works IDS sensors and CSPM with sink hole technique.

2 REPLIES
Silver

Re: sink hole & IDS

Cisco's IDS/CSPM does not have this built in functionality to trigger creation of the sink hole. If the sink hole is created by the user then the Cisco IDS can be used to monitor the sink hole. If I remember correctly, CSPM does have the ability to execute user created programs/scripts. If you created your own script to setup the sink hole then you could get CSPM to execute that script when certain alarms are seen. But you would have to create this script yourself.

New Member

Re: sink hole & IDS

Thanks for the information.

Can you help me with some links or examples regarding to this ?

What is better to use for manage with sink hole : CSPM, IDS Director or IDS Manager and Event Viewer ?

Best regards

88
Views
0
Helpful
2
Replies