Using Management Center for IDS Sensors 1.2
Generating, Approving, and Deploying Sensor Configurations

Table of Contents

Generating, Approving, and Deploying Sensor Configurations
Task List for Generating, Approving, and Deploying Sensor Configurations

Generating, Approving, and Deploying Sensor Configurations


You must generate, approve, and deploy sensor configurations after you configure sensors and groups of sensors.

You must have a user account with privileges to generate, approve, or deploy configuration files. Five types of accounts, or authorization roles, are available in IDS MC. The Approver can approve sensor configurations, the Network Operator can deploy sensor configurations, and the System Administrator can generate, approve, and deploy sensor configurations.

  • Help Desk—Privileges for this type of account are read-only for the entire system. Using this type of account, you can view any report or alarm but cannot delete reports or alarms and cannot generate reports.
  • Approver—Privileges for this type of account are read-only for the entire system and the ability to approve configurations. Using this type of account, you can view any report or alarm but cannot delete reports or alarms and cannot generate reports.
  • Network Operator—Privileges for this type of account are read-only for the entire system and the ability to deploy configurations. Using this type of account, you can view any report or alarm, delete reports and alarms, and generate reports.
  • Network Administrator—Privileges for this type of account are read-only for the entire system and the ability to edit devices and device groups.
  • System Administrator—Using this type of account, you can edit anything in the system, view any report or alarm, delete reports and alarms, generate reports, and import lists (files) and notification scripts.

Task List for Generating, Approving, and Deploying Sensor Configurations

From the Deployment tab you can generate, approve, and deploy sensor configurations.

For step-by-step procedures on performing a specific task, refer to the corresponding section.

Generating Sensor Configurations

This procedure describes how to generate sensor configurations. It applies to sensors for which you have saved proposed configuration changes to the database but for which the configurations have not been generated.

You must have a user account with adequate privileges to generate sensor configurations.

You cannot generate a configuration for proposed configuration changes until you save them to the database. You can review proposed configuration changes to determine whether you have saved them; for more information, see Reviewing Pending Configuration File Settings.


Note   Unless you specify otherwise, IDS MC automatically approves sensor configurations when you generate them.

To generate a sensor configuration, follow these steps:


Step 1   Select Deployment > Generate.

The Generate page appears.


Step 2   To generate a configuration file for a particular sensor, select that sensor from the tree, and then click Generate.

Step 3   You can verify that the configuration file was generated; for more information, see Reviewing Historical Configuration File Settings





Approving Sensor Configurations

This procedure describes how to approve, view, and delete proposed sensor configurations.

You must have a user account with adequate privileges to approve sensor configurations.

To approve a sensor configuration, follow these steps:


Step 1   Select Deployment > Approve.

The Approve page appears.


Step 2   To approve a configuration, select the corresponding check box, and then click Approve.


Note    Unless you specify otherwise, IDS MC approves configurations when you generate them. To specify manual approval, select Admin > System Configuration, and then select Configuration File Management from the TOC.

Step 3   You can also view and delete configurations on the Approve page by clicking View and Delete, respectively.





Deploying Sensor Configurations

This procedure describes how to deploy approved sensor configurations.

You must have a user account with adequate privileges to deploy sensor configurations.

To deploy a sensor configuration, follow these steps:


Step 1   Select Deployment > Deploy.

Step 2   From the TOC, select Submit.

The Submit page appears.


Step 3   In the tree, select the sensor for which you want to deploy a configuration.

The Select Configurations page appears.

Step 4   Select a sensor configuration by selecting the corresponding check box, and then click Next.

The Enter Job Properties page appears.

Step 5   Enter the name of the job in the Job Name field under Schedule Type.

Step 6   To deploy the job immediately, click the Immediate radio button. Then, proceed to Step 13.

Step 7   To deploy the job at a specific date and time, click the Scheduled radio button, and then select the desired start date and time using the list boxes to the right of Start Time.

Step 8   Enter the maximum number of deployment attempts that should be tried in the Maximum Number Of Attempts field under Retry Options.


Note    Enter 0 (zero) in the Maximum Number Of Attempts field to specify no retries.

Step 9   Enter the time, in minutes, between attempts in the Time Between Attempts field.


Note    The default time is 15 minutes.

Step 10   To overwrite a conflicting configuration on the sensor, ensure that the Overwrite conflicting sensor(s) configuration? check box under Failure Options is selected.

Step 11   To require that sensor versions are correct, ensure that the Require correct sensor versions? check box under Failure Options is selected.

Step 12   To enable notification on deployment, select the Email report to: check box under Notification Options, and then, in the Email report to: field, enter the e-mail addresses of the people to be notified. Use commas to separate e-mail addresses.

Step 13   Click Finish.

The Submit page appears.

Step 14   To verify that you have submitted a configuration file for deployment, select Deployment > Deploy, and then select Pending from the TOC.

The Pending page appears.


Step 15   On the Pending page, you can edit a pending deployment or delete it.