Add An Iss Realsecure Device As A Hids - Cisco CS-MARS-20-K9 - Security MARS 20 User Manual

ISS RealSecure 6.5 and 7.0
From the Select Application list, select RealSecure (6.5 or 7.0).
Step 6
Click Add.
Step 7
Click the NIDS radio button, if it is not already selected.
Step 8
Figure 6-9
For attack path calculation and mitigation, specify the networks being monitored by the sensor. Do one
Step 9
of the following:
To manually define the networks, select the Define a Network radio button.
a.
b.
c.
d.
To select the networks that are attached to the device, click the Select a Network radio button.
a.
b.
c.
To save your changes, click Submit.
Step 10
To enable MARS to start sessionizing events from this module, click Activate.
Step 11

Add an ISS RealSecure Device as a HIDS

Step 1 Click Admin > System Setup > Security and Monitor Devices > Add.
From the Device Type list, select Add SW Security apps on a new host or Add SW security apps on
Step 2
existing host.
Enter the Device Name.
Step 3
User Guide for Cisco Security MARS Local Controller
6-20
Configure ISS Real Secure NIDS
Enter the network address in the Network IP field.
Enter the corresponding network mask value in the Mask field.
Click Add to move the specified network into the Monitored Networks field.
Repeat as needed.
Select a network from in the Select a Network list.
Click Add to move the selected network into the Monitored Networks field.
Repeat as needed.
Chapter 6 Configuring Network-based IDS and IPS Devices
78-17020-01