Chapter 6
Configuring Network-based IDS and IPS Devices
Figure 6-13
On the SNMP Forwarder page, enter:
Step 7
a.
b.
c.
d.
e.
f.
g.
Click Apply and exit the program.
Step 8
Add and Configure an IntruShield Manager and its Sensors in MARS
Adding an IntruVert device has two distinct steps. First, you add configuration information for the for
the IntruShield Manager host. Second, you add the sensors managed by that host.
•
•
•
78-17020-01
IntruShield Target SNMP Server
Enable SNMP Forwarder: Select the Yes radio button.
Target Server (IP Address): Enter MARS's IP address as it appears to IntruShield.
Target Server Port Number: Enter MARS's port number 162.
SNMP Version: 1
Forward Alerts
Select the severity from the list. Cisco recommends selecting Informational and above severity.
Customize Community: Enter the community string that you want to use.
Add the IntruShield Manager Host to MARS, page 6-26
Add IntruShield Sensors Manually, page 6-26
Add IntruShield Sensors Using a Seed File, page 6-27
User Guide for Cisco Security MARS Local Controller
IntruVert IntruShield
6-25