Cisco CS-MARS-20-K9 - Security MARS 20 User Manual page 64

Bootstrap Summary Table
Table 2-3 Reporting and Mitigation Device Bootstrap Summary (continued)
Device Type/Name
Network IDS
Cisco Network IDS
Cisco IDSM
Cisco Intrusion
Prevention System
(IPS), Network IPS
Cisco IPS ASA module
Cisco IOS IPS module
McAfee Intrushield
Juniper Netscreen IDP
Symantec Manhunt
ISS RealSecure
Snort
Enterasys Dragon
User Guide for Cisco Security MARS Local Controller
2-14
Bootstrap Summary
Enable RDEP for IDS modules.
1.
Configure the following signature actions:
2.
Alert
•
(Optional) To view trigger packets, enable the
•
"produce-verbose-alert".
(Optional) To view IP logs, enable the alert or
•
"produce-verbose-alert" and
"log-pair-packets".
Enable SDEE for IPS modules.
1.
Configure the following signature actions:
2.
• Alert
• (Optional) To view trigger packets, enable the
"produce-verbose-alert".
• (Optional) To view IP logs, enable the alert or
"produce-verbose-alert" and
"log-pair-packets".
1. Enable SDEE for IPS modules.
Configure the following signature actions:
2.
Alert
•
(Optional) To view trigger packets, enable the
•
"produce-verbose-alert".
(Optional) To view IP logs, enable the alert or
•
"produce-verbose-alert" and
"log-pair-packets".
Enable SDEE for IPS modules.
1.
Configure the following signature actions:
2.
Alert
•
(Optional) To view trigger packets, enable the
•
"produce-verbose-alert".
(Optional) To view IP logs, enable the alert or
•
"produce-verbose-alert" and
"log-pair-packets".
Chapter 2 Reporting and Mitigation Devices Overview
Reference Information
Cisco IDS 3.1 Sensors, page 6-1
Cisco IDS 4.0 and IPS 5.x Sensors, page 6-5
Cisco IDS 4.0 and IPS 5.x Sensors, page 6-5
Cisco IPS Modules, page 6-10
Cisco IPS Modules, page 6-10
IntruVert IntruShield, page 6-22
NetScreen IDP 2.1, page 6-31
Symantec ManHunt, page 6-29
ISS RealSecure 6.5 and 7.0, page 6-17
Snort 2.0, page 6-28
Enterasys Dragon 6.x, page 6-33
78-17020-01