Using Management Center for IDS Sensors 1.2
Limitations and Restrictions: Moving from the Unix Director or CSPM to IDS MC and Security Monitor
-
Using Management Center for IDS Sensors 1.2
-
Preface
-
Introduction
-
Getting Started with Management Center for IDS Sensors (IDS MC)
-
Managing Sensors with IDS MC
-
Adding Sensors and Sensor Groups
-
Configuring Sensors and Signatures
-
Generating, Approving, and Deploying Sensor Configurations
-
Tuning Sensor Configurations
-
Administering the IDS MC Server
-
Limitations and Restrictions: Moving from the Unix Director or CSPM to IDS MC and Security Monitor
-
Troubleshooting IDS MC
-
Index
-
Download this chapter
Download the complete book
Table of Contents
Limitations and Restrictions: Moving from the Unix Director or CSPM to IDS MC and Security MonitorLimitations and Restrictions: Moving from the Unix Director or CSPM to IDS MC and Security Monitor
If you use Cisco Secure Policy Manager (CSPM) or Unix Director to manage Cisco IDS Sensors and other devices, but plan to begin using IDS MC and Security Monitor, the following information is important.
- Using Existing Sensor Configurations—In IDS MC, you can discover sensor settings, but you must enter configuration data that cannot be discovered. See Adding Sensors to a Sensor Group.
 |
Note Sensor configuration files cannot be imported into IDS MC from an existing CSPM or Unix Director installation. |
- Using Existing Custom Signatures—You can use existing custom signatures if you discover them with along other sensor settings, but you must enter configuration data that cannot be discovered. See Adding Sensors to a Sensor Group.
- Migration of Existing Event Data—IDS MC and Security Monitor do not support the migration of event data.
- Migration of Existing Notification Scripts—Security Monitor provides the script
LegacyIf.plas an interface to CSPM scripts. TheLegacyIf.plscript executes a query against the Security Monitor database and writes all matching alarms for the event filter to a temp file.LegacyIf.plthen finds the most recent alarm in the set, parses the alarm fields, and calls the CSPM script with the alarm field arguments the same way CSPM would call the CSPM script. More information is available in the Security Monitor documentation. - Installation—You cannot install IDS MC or Security Monitor by upgrading an existing installation of CSPM or Unix Director; you must install IDS MC or Security Monitor separately, and you must install it on Windows 2000.
- Supported Sensor Versions—IDS MC and Security Monitor support sensors running IDS 3.0 and later. Sensors running software versions earlier than IDS 3.0 are not supported.