Rdep - Cisco IDS-4230-FE - Intrusion Detection Sys Fast Ethernet Sensor Installation And Configuration Manual

Appendix A Intrusion Detection System Architecture

RDEP

Figure A-5 Retrieving Events Through RDEP
Sensor
Request
EventStore
Cisco Intrusion Detection System Appliance and Module Installation and Configuration Guide Version 4.1
78-15597-02
IDS events
•
– Subscribes to remote IDS events, which are stored in the local EventStore
when received.
– Reads IDS events from the local EventStore.
Writes IDS events to the local EventStore.
–
IDAPI provides the necessary synchronization mechanisms to guarantee atomic
data accesses.
Remote applications can retrieve events from the sensor through RDEP. The
remote client sends an RDEP event request to the sensor's WebServer, which
passes it to the EventServer. The EventServer queries the EventStore through
IDAPI and then returns the result.
applications retrieving events from the sensor through RDEP.
Event
IDAPI
Event
Figure A-5 on page A-47
IEV, IDS-MC, Third Party Event
Management Applications
RDEP
Client
HTTP GET
WebServer
Event
Request
EventServer
Event
System Architectural Details
shows remote
Events
A-47