Table of Contents
Advertisement
Chapter 7
Configuring Host-Based IDS and IPS Devices
Add CSA Agents From File
You can add the complete list of hosts on which CSA Agents are installed by exporting the all hosts
report from CSA MC and importing that file into MARS. The only advantage to adding agents using an
export file is that the first notification received that originates from the agent is not attributed to the
CSA MC.
To add CSA agents from a file, follow these steps:
Click Admin > Security and Monitoring Devices.
Step 1
From the list of devices, select the host running Cisco CSA Management Center, and click Edit.
Step 2
Click the Reporting Applications tab, select Cisco CSA Management Center in the Device Type list,
Step 3
and click Edit.
Click Load From File.
Step 4
a
Caution
The file should be formatted as a tab delimited file. You cannot use a CSV file. To generate a tab
delimited file of the CSA agents managed by the CSA MC, see
page
In the IP Address field, enter the address of the FTP server where you stored the exported hosts file, as
Step 5
described in
In the User Name field, enter the name of the account used to authenticate to the FTP server.
Step 6
In the Password field, enter the password that corresponds to the account specified in
Step 7
Step 8
In the Path field, enter the path to the folder where the file is stored. If this file is stored in the root folder,
you must specify a backslash (\) in this field. The format of this value is
Step 9
In the File Name field, enter the name of the tab delimited file.
Step 10
Click Submit.
The following message displays and the hosts are added as agents of the CSA MC:
Success:
Status: OK
Step 11
Click Done.
78-17020-01
7-6.
Export CSA Agent Information to File, page
Export CSA Agent Information to File,
7-6.
\<path_here>\
User Guide for Cisco Security MARS Local Controller
Cisco Security Agent 4.x Device
Step
6.
.
7-9
Advertisement
Table of Contents
Troubleshooting
