Table of Contents
Advertisement
Chapter 6
Configuring Network-based IDS and IPS Devices
b.
c.
d.
To select the networks that are attached to the device, click the Select a Network radio button.
a.
b.
c.
To save your changes, click Submit.
Step 5
To enable MARS to start sessionizing events from this module, click Activate.
Step 6
Add IntruShield Sensors Using a Seed File
To add sensors using a seed file, follow these steps:
Click Load From CSV.
Step 1
Enter the FTP server information and location of the CSV (comma separated values) file.
Step 2
•
Click Submit.
Step 3
The list of sensors appears on the management console page.
For each sensor that appears in the management console page, select the check box next to the sensor
Step 4
and click Edit Sensor.
For attack path calculation and mitigation, specify the networks being monitored by the sensor. Do one
Step 5
of the following:
To manually define the networks, select the Define a Network radio button.
a.
b.
c.
d.
To select the networks that are attached to the device, click the Select a Network radio button.
a.
b.
c.
To save your changes, click Submit.
Step 6
To save the changes made to this management console and the sensors it manages, click Submit.
Step 7
Step 8
To enable MARS to start sessionizing events from this module, click Activate.
78-17020-01
Enter the corresponding network mask value in the Mask field.
Click Add to move the specified network into the Monitored Networks field.
Repeat as needed.
Select a network from in the Select a Network list.
Click Add to move the selected network into the Monitored Networks field.
Repeat as needed.
If you need to generate the IntruShield sensors CSV file,
from the IntruShield Manager, page
Enter the network address in the Network IP field.
Enter the corresponding network mask value in the Mask field.
Click Add to move the specified network into the Monitored Networks field.
Repeat as needed.
Select a network from in the Select a Network list.
Click Add to move the selected network into the Monitored Networks field.
Repeat as needed.
Extracting Intruvert Sensor Information
6-22.
User Guide for Cisco Security MARS Local Controller
IntruVert IntruShield
6-27
Advertisement
Table of Contents
Troubleshooting
