Using Management Center for IDS Sensors 1.2
	Preface
Using Management Center for IDS Sensors 1.2 Preface Introduction Getting Started with Management Center for IDS Sensors (IDS MC) Managing Sensors with IDS MC Adding Sensors and Sensor Groups Configuring Sensors and Signatures Generating, Approving, and Deploying Sensor Configurations Tuning Sensor Configurations Administering the IDS MC Server Limitations and Restrictions: Moving from the Unix Director or CSPM to IDS MC and Security Monitor Troubleshooting IDS MC Index	Download this chapter Preface Download the complete book Using Management Center for IDS Sensors 1.2 (whole book PDF) (PDF - 2 MB) Table of Contents Preface Audience Conventions Product Documentation Related Documentation Additional Information Online Obtaining Documentation Cisco.com Documentation CD-ROM Ordering Documentation Documentation Feedback Obtaining Technical Assistance Cisco.com Technical Assistance Center Cisco TAC Website Cisco TAC Escalation Center Obtaining Additional Publications and Information Preface This document describes how to use the Management Center for IDS Sensors (IDS MC) to manage configurations for Cisco Intrusion Detection System Sensors. Audience This document is intended for experienced network security administrators who configure and maintain more than one (and up to 300) Cisco Intrusion Detection System (IDS) Sensors. These administrators may have experience ranging from novice to expert, with the assumption that novices will improve their knowledge before they can use this product effectively. Conventions This document uses the following conventions: ons. Devices—Displays options for adding, editing, importing, and deleting monitored devices. Monitor—Displays options for monitoring device status and using Event Viewer. Reports—Displays options for generating, scheduling, and viewing reports. Admin—Displays options for administering database rules, system configuration, Event Viewer preferences, and event rules. erences Release Modification 11.3(3a) New command Specify logging parameters for the switch system log file. show debug fcswitch Display internal FC interface parameters, including switch log entries.   Selecting a menu item in tables Option > Network Preferences Note   Means reader take note. Notes contain helpful suggestions or references to material not covered in the publication. Caution   Means reader be careful. In this situation, you might do something that could result in equipment damage or loss of data. Warning This symbol means danger. You are in a situation that could cause bodily injury. Product Documentation Note   We sometimes update the printed and electronic documentation after original publication. Therefore, you should also review the documentation on Cisco.com for any updates. Table 1 describes the product documentation that is available.
1	Wizard steps—Displays an ordered list of steps. Ellipses (...) mean the following steps depend on which option you select.	3	Action buttons—Initiate actions or commands for this page. Buttons that do not work on a particular page are dimmed. Some of the action buttons you may see in a wizard are: Back—Returns you to the previous page of the wizard. Next—Opens the next page of the wizard. Finish—Completes the wizard Cancel—Closes the wizard without making any changes.
2	Wizard page—The area in which you work. Displays the following types of information: Table—List of items and their components. Field—Area in which you enter values. Instructions box—A brief overview of how to use the page.

Related Documentation

Note   We sometimes update the printed and electronic documentation after original publication. Therefore, you should also review the documentation on Cisco.com for any updates.

Table 2 describes the additional documentation that is available.

Additional Information Online

You can download signature updates for IDS MC and Security Monitor by logging in to Cisco.com at http://www.cisco.com/pcgi-bin/tablebuild.pl/mgmt-ctr-ids .

Obtaining Documentation

Cisco provides several ways to obtain documentation, technical assistance, and other technical resources. These sections explain how to obtain technical information from Cisco Systems.

Cisco.com

You can access the most current Cisco documentation on the World Wide Web at this URL:

http://www.cisco.com/univercd/home/home.htm

You can access the Cisco website at this URL:

http://www.cisco.com

International Cisco websites can be accessed from this URL:

http://www.cisco.com/public/countries_languages.shtml

Documentation CD-ROM

Cisco documentation and additional literature are available in a Cisco Documentation CD-ROM package, which may have shipped with your product. The Documentation CD-ROM is updated regularly and may be more current than printed documentation. The CD-ROM package is available as a single unit or through an annual or quarterly subscription.

Registered Cisco.com users can order a single Documentation CD-ROM (product number DOC-CONDOCCD=) through the Cisco Ordering tool:

http://www.cisco.com/en/US/partner/ordering/ordering_place_order_ordering_t ool_launch.html

All users can order monthly or quarterly subscriptions through the online Subscription Store:

http://www.cisco.com/go/subscription

Ordering Documentation

You can find instructions for ordering documentation at this URL:

http://www.cisco.com/univercd/cc/td/doc/es_inpck/pdi.htm

You can order Cisco documentation in these ways:

http://www.cisco.com/en/US/partner/ordering/index.shtml

Documentation Feedback

You can submit comments electronically on Cisco.com. On the Cisco Documentation home page, click Feedback at the top of the page.

You can e-mail your comments to bug-doc@cisco.com.

You can submit comments by using the response card (if present) behind the front cover of your document or by writing to the following address:

Cisco Systems
Attn: Customer Document Ordering
170 West Tasman Drive
San Jose, CA 95134-9883

We appreciate your comments.

Obtaining Technical Assistance

Cisco provides Cisco.com, which includes the Cisco Technical Assistance Center (TAC) website, as a starting point for all technical assistance. Customers and partners can obtain online documentation, troubleshooting tips, and sample configurations from the Cisco TAC website. Cisco.com registered users have complete access to the technical support resources on the Cisco TAC website, including TAC tools and utilities.

Cisco.com

Cisco.com offers a suite of interactive, networked services that let you access Cisco information, networking solutions, services, programs, and resources at any time, from anywhere in the world.

Cisco.com provides a broad range of features and services to help you with these tasks:

To obtain customized information and service, you can self-register on Cisco.com at this URL:

http://tools.cisco.com/RPF/register/register.do

Technical Assistance Center

The Cisco TAC is available to all customers who need technical assistance with a Cisco product, technology, or solution. Two types of support are available: the Cisco TAC website and the Cisco TAC Escalation Center. The type of support that you choose depends on the priority of the problem and the conditions stated in service contracts, when applicable.

We categorize Cisco TAC inquiries according to urgency:

Cisco TAC Website

The Cisco TAC website provides online documents and tools to help troubleshoot and resolve technical issues with Cisco products and technologies. To access the Cisco TAC website, go to this URL:

http://www.cisco.com/tac

All customers, partners, and resellers who have a valid Cisco service contract have complete access to the technical support resources on the Cisco TAC website. Some services on the Cisco TAC website require a Cisco.com login ID and password. If you have a valid service contract but do not have a login ID or password, go to this URL to register:

http://tools.cisco.com/RPF/register/register.do

If you are a Cisco.com registered user, and you cannot resolve your technical issues by using the Cisco TAC website, you can open a case online at this URL:

http://www.cisco.com/tac/caseopen

If you have Internet access, we recommend that you open P3 and P4 cases online so that you can fully describe the situation and attach any necessary files.

Cisco TAC Escalation Center

The Cisco TAC Escalation Center addresses priority level 1 or priority level 2 issues. These classifications are assigned when severe network degradation significantly impacts business operations. When you contact the TAC Escalation Center with a P1 or P2 problem, a Cisco TAC engineer automatically opens a case.

To obtain a directory of toll-free Cisco TAC telephone numbers for your country, go to this URL:

http://www.cisco.com/warp/public/687/Directory/DirTAC.shtml

Before calling, please check with your network operations center to determine the Cisco support services to which your company is entitled: for example, SMARTnet, SMARTnet Onsite, or Network Supported Accounts (NSA). When you call the center, please have available your service agreement number and your product serial number.

Obtaining Additional Publications and Information

Information about Cisco products, technologies, and network solutions is available from various online and printed sources.

http://www.cisco.com/en/US/products/products_catalog_links_launch.html

http://www.ciscopress.com

http://www.cisco.com/go/packet

http://www.cisco.com/go/iqmagazine

http://www.cisco.com/en/US/about/ac123/ac147/about_cisco_the_internet_ protocol_journal.html

http://www.cisco.com/en/US/learning/le31/learning_recommended_training _list.html