Add A Dragon Nids Device - Cisco CS-MARS-20-K9 - Security MARS 20 User Manual

Chapter 6 Configuring Network-based IDS and IPS Devices
Enter the Device Name and IP Addresses if adding a new host.
Step 3
Click Apply
Step 4
Click Reporting Applications tab
Step 5
From the Select Application list, select Enterasys Dragon 6.x
Step 6
Click Add.
Step 7

Add a Dragon NIDS Device

Step 1 Click Add Sensor.
Step 2 Select existing device or Add New device.
Enter the Device Name, Sensor Name, and its Reporting IP address.
Step 3
•
•
•
Add the interfaces, which important information for attack path calculation.
Step 4
•
For attack path calculation and mitigation, specify the networks being monitored by the sensor. Do one
Step 5
of the following:
To manually define the networks, select the Define a Network radio button.
a.
b.
c.
d.
To select the networks that are attached to the device, click the Select a Network radio button.
a.
b.
c.
To save your changes, click Submit.
Step 6
Step 7 Click Done when you are done adding the sensor.
Step 8 To enable MARS to start sessionizing events from this module, click Activate.
78-17020-01
Device Name – the DNS entry for this device
Sensor Name – the name as it appears in the console
Reporting IP – the IP address that the agent uses to send logs to the console
For multiple interfaces, click Add Interface, and add the new interfaces's name, IP address and
mask.
Enter the network address in the Network IP field.
Enter the corresponding network mask value in the Mask field.
Click Add to move the specified network into the Monitored Networks field.
Repeat as needed.
Select a network from in the Select a Network list.
Click Add to move the selected network into the Monitored Networks field.
Repeat as needed.
User Guide for Cisco Security MARS Local Controller
Enterasys Dragon 6.x
6-35