some problem about IDM 4.0

[mingchieh]

1:where is the e-mail alert setting menu on IDM 4.0 ?

2: i want to prevent port-scan , can I config on my IDM 4.0

(I mean which signature)??

[kleem]

The 4.0 Sensor does not provide the capability to generate email alerts. That functionality is provided by the IDS SM.

I believe that the basic port sweep signatures are on by default. You can configure these signatures by logging into IDM and going to the ConfigurationSensing EngineVirtual Sensor ConfigurationSignature Configuration Mode page and selecting the Reconnaissance Signature Group. You will find the port scan signatures within this group.

[mingchieh]

Hello

what is "IDS SM"

[marcabal]

IDS SM

= IDS Security Monitor

= Monitoring Center for Security

IDS MC

= IDS Management Center

= Management Center for Intrusion Detection Systems

VMS

= Cisco Works 2000 VPN/Security Management Solution

VMS is a suite of tools for managing your different Cisco Security devices.

Both IDS MC and IDS SM are tools within the latest version of VMS that can be used for configuring and monitoring IDS sensors

http://www.cisco.com/en/US/products/sw/cscowork/ps2330/index.html.