A question on IDS ver 5

I have just upgraded a 4215 sensor to ver 5, it was a replacement so I started afresh. I ran the setup and then entered IDM, under Interfaces I can only see one I/F fa0/1 the management I/F the monitoring doesn't appear, I have re-checked the sensors setup and can see the I/F's from the CLI any ideas where I'm going wrong.
Also any idea how I verify that the sensor is able to communicate with the Pix I have entered the details but there seems no way of confirming connectivity (In Ver 3 there was conformation that the two were talking)
Thanks
Mark

All informaton relavant to IPS 5.0 is available in the following URL,
http://www.cisco.com/univercd/cc/td/doc/product/iaabu/csids/csids11/cliguide/index.htm

Similar Messages

  • Some Questions for IDS MC?

    1. After alert events are pruned into the fold "AlertPruneData", they will become some "txt" files. Which application can I use to read the events from these txt file?
    2. For the default alarm pruning, it is stated in the document only the events in the alert table will be pruned. But after pruning, I can see some syslogxxx.txt files in the "AlertPruneData" folder. Does it mean that the events in the syslog table have been pruned too?
    Thanks for your all comments

    You can prune alarms based on a number of different criterion such as 'alarms older than the specified number of days' or 'number of events in a table has exceeded a given limit'. Also, pruning can be done on a specified table or tables, ie you can specify the type of table to be pruned. You can choose from the table types syslog, alert, auditlog, deploy and sysconfig or you could list multiple tables (using a comma-delimited list).
    'Default alarm pruning' and 'default syslog pruning' are two database rules for pruning event that by default are present in the Database Rules page. Further, It is my understanding that all pruned data goes(is archived in) the same folder. What might be happening is that the syslog messages you see were pruned from the syslog table by the 'default syslog pruning rule' and not the alerts table.
    If you wish to do so, default rules too can be modified. For more information, you could take a look at the document Administering Security Monitor at the URL http://www.cisco.com/en/US/products/sw/cscowork/ps3991/products_user_guide_chapter09186a00800e4371.html

  • Question about IDS Self Study Guide for IDS

    Hello,
    i'm searching for a self study guide for the ips (ASA-SSM-10/20) where i can see how to configure signatures and deployment.
    Thanks in advance for your help
    regards
    Klaus

    The signature configuration for the SSM module is identical to any of the other IPS sensors. The root of all IPS documentation is here:
    http://cisco.com/en/US/products/hw/vpndevc/ps4077/tsd_products_support_series_home.html
    Here is the ASA 7.1 doc on how to move traffic to the SSM
    http://cisco.com/en/US/docs/security/asa/asa71/configuration/guide/ssm.html

  • HT204053 I only have one e-mail, how do I set up separate apple IDs for three family members ?

    How do I create apple IdS for three family members with the same e-mail? They are kids and have no e-mail.

    You can configure a new email address for them using the @cloud.com server suffix. Do that when you open an iCloud account for each and set up the separate Apple IDs that will each be tied to a different email address.
    Apple iCloud - Pertinent Questions
    Apple IDs and iCloud
    iCloud Help
    Creating an iCloud account- Frequently Asked Questions

  • Could ver 7.1.1 be cauing problems to facebook

    since april 21 2014 facebook won't log off the menu button crashes the probelm. had the phone @the apple store today lost all my text message to find out it is the facebook app my question is could Ver 7.1.1 be causing the crash???

    but the opposite isnt possible sady!
    I just sold my iPhone 5s and waiting 4 weeks now for my iPhone 6+
    I took out my old iPhone 4 and tried to restore it from a backup i had just created a few hours ago on my 5s (iOS8) and the option was greyed out.
    I could only see backups from a year back !
    You cant restore an iPhone 4 with iOS 7.1.2 from a backup created on iOS 8 !!!!
    That's so STUPID!
    iCloud syncs my contacts, calendars and reminders, but i have to setup all the rest of the settings manually! I have 7 email accounts, mix of gmail, hotrmail, yahoo, 2 exchange, others, etc. lots of personalized settings, Apps that i need to download again and arrange in folders like before, ......big hassle!!!
    It shouldn't be that tough Apple!

  • IDS Addressing /VLAN issue

    We have an IDS ver 4.1 in a cat 6k, and initially addressed it in a lab in vlan 1 as such:
    vlan 1: 161.220.60.1 /24
    IDS: 161.220.60.10 /24
    the IDS gateway is Vlan 1 ip.
    this has worked fine, able to ping and telnet btw. the 6k and the IDS. but in getting ready for deployment, we have decided that we would rather not use vlan 1, and created a new vlan for our IDS and NAM, say VLAN 100. we removed the addressing from VLAN 1 and shut it down. Addressed VLAN 100 in the say way, but now no longer to even ping the IDS from the cat 6k. I even added a static route:
    ip route 161.220.60.10 255.255.255.255. vlan 100
    still unable to ping the IDS. It seems that the vlan 1 info is cached in some way, preventing any access through the new vlan 100. we cleared the arp, is there anything else that needs cleared so the IDS can be part of vlan 100 as it was in vlan 1.
    Also, is there any known issue if we were to decide to put the IDS and NAM back into vlan 1 ?

    The IDSM-2's command and control port is in vlan 1 by default so you did not need to execute a special command to move it to vlan 1.
    BUT, If you want to move it to vlan 100, then you will need to execute the switch command to move the IDSM-2's command and control port to vlan 100.
    Examples for a module in slot 5
    For Cat OS:
    set vlan 100 5/2
    For Native IOS
    intrusion-detection module 5 management-port access-vlan 100
    (Similar changes would be needed for NAM as well).
    Have you executed the above switch command to move the command and control of the IDSM-2 to vlan 100?

  • CLI framerate and serial jobs on a cluster

    Hello,
    I have couple of questions for compressor (ver 4 )
    1) Is there a way to specify framerate for image sequence using command line interface.
    The compressor help lists the following but does not provide a way how such an option work. I tried few different ways in vain
    -jobpath  -- url to source file.                        -- In case of Image Sequence, URL should be a file URL pointing to directory with image sequence.
    -- Additional parameters may be specified to set frameRate (e.g. frameRate=29.97) and audio file (e.g. audio=/usr/me/myaudiofile.mov).
    2) I have a managed cluster with 8 nodes each running 4 instances. For some reason compressor only uses 6 instances spread across many nodes and not all 32.
    3) Is there a way to specify and process just one job for a given cluster? This is equivalent of serialize option but it does not seem to be available.
    Currently when I submit multiple jobs few of them run at once and create a havok on NFS mounts and fail. I can limit the job queue to one but that is not ideal.
    I would appreciate any pointers.
    Thanks
    --Amit

    Hi Amit, just saw your post. I assume you are passing the settings via the "-settingspath" <my_specific_job_settings_in_a_file_path_somwhere.settings" on the compressor command?
    If so, it's a very simple matter to specify the frame rate etc etc on the VIDEO setting itself, save it and use it.
    I don't recall that such "atomic settings" we're actually available in the v3 of compressor.app. I'll check later for v4. I'd be surprised  if they are. :)
    What I've done in the past is to simply make my own personalised settings (and destinations) up using  the Compressor.app V4 UI (save as ... my name .. i.e.  prores_noaudio_PAL" and path these file paths on the -settingspath" parm on the compressor cli. In your case I'd imagine a simple VIDEO setting for your frame rate and you're set!
    Compressor.app v4 makes any of your own R.Y.O settings on your ~/library/application support/compressor/settings folder. You can copy or move or link these anywhere you like and pass these customised Parms to compressor cli as above.
    I doubt also if these atomic settings are available as AppleScript properties, there's likely no vars like that there me thinks. . I recall the same ones exist as they do for the cli and now in compressor.app 4 they probably support Qmaster .. Yeah.. Compressor.app is apple scriptable.. It's not in the default list library so just add it...
    Lastly as a guess these compressor ".setting" files are probably XML base.. So you might consider to tinker with one with an editor.
    Anyway.. Try then"-settingspath" operand and see how u go.
    2) the way Qmaster schedules across unmanaged transcode nodes is likely based on how busy each node is. You should be able to see if there is a pattern simply by looking on the Qmaster job controller.log .. See share monitor.app info or use console.app look on
    your ~/library/application support/apple Qmaster/logs directory. There will be something in there.
    Also have a look for any errors on the cluster services logs in case the services you expects to be there are actually not.
    Are you using a managed cluster? Personally I have found this quite stable. Make sure u insure that those services are for managed climates only..
    3) yes you can specify a specific cluster on the using the "-clusterid" operand. Should you have more than one managed cluster in the farm, this is a cool way to go. Also considering the "-priority" operand usage as well for hot jobs. Make sure all submissions are low priority... It's batch.. Works great!!
    4) NDS mounts.. Well the simple rule is to keep them mounted on their own subnet, maker sure all destinations and sources are available to all hosts, set compressor options to copy to cluster only when ya must, and make sure the service time for NDS io READ Request is as fast as u can make it. ( jumbo frames, dedicated NICs and sinners and optimum fast read file systems... Keep other traffic away for it.. Works a treat!
    Should you turn something up pleased at it here for others to see. I'm certainly interested.
    Sorry for typos.. Just on MTR with iPhone on way home. :)
    Hth
    Warwick
    Hong Kong

  • How do I set up family share for 2 iPhones 2 iPads 2 iPods and 1laptop?

    My husband, son, and I cannot figure out how to set up family share. we have 7 devices between the 3 of us. we each have iTunes accounts, but we faked my sons birthday because he is 7. How can I set it up for all of us to share music,
    photos etc?

    Creating an iCloud account- Frequently Asked Questions
    Apple IDs and iCloud

  • HT4436 How do I set up a separate iCloud account ?, at the moment my wife and myself share the same iCloud account, even though we have different iTunes accounts on the computer.

    I'd like to have separate iCloud accounts for myself and my wife, at the moment any photos, calendars etc transfer to our iPhones &amp; iPads from each other. I'd rather not have this as its a nuisance when we receive items that one of us doesn't want!.

    Creating an iCloud account- Frequently Asked Questions
    Apple IDs and iCloud

  • Please Help with Setting Up an iCloud Account with a PC

    Friends,
    I'm using a IBM ThinkPad W510 with Mozilla Firefox as my search engine, Thunderbird as my email program and I recently purchased an iPad 3 and own an iPod.  I am very interested in using iCloud but short of finding an IT Engineer, I am in dire need of step by step help on how to set up iCloud on these three pieces of hardware.  I'm willing to pay for the information if needed but as it looks now, after spending three nights and about 9 hours I don't think it's possible.  My email address is [email protected] and I am unclear as to if I have to use .me or whatever Apples email options are.  I really need help and it's stuff like this that really keep 30 year PC users from jumping the fence and going totally Apple which I may consider in the future after seeing Windows 8 in the fall. Please help me out.
    With Great Respect and Needs,
    Ed

    iCloud Help
    Creating an iCloud account- Frequently Asked Questions
    Apple IDs and iCloud
    iCloud: What version of Windows software am I using for iCloud?

  • UCCX8 over Wan

    Hi there,
    Got some questions regards UCCX ver 8.x deployment.
    I have a customer with their Main site in one country and a remote site in another. They are connected with an MPLS link.
    Main site has CUCM6, UCCX7 and 14 UCCX agents.
    Remote site has 14 UCCX Agents connected via MPLS wan.
    UCCX8 HA and CUCM8 has now increased its Round trip delay to 80ms.
    So if we upgrade CUCM and UCCX can i do the following?
    Is it possible to deploy another UCCX server and Subscriber at the remote site and point the agents at the local UCCX server?
    Can this be done using HA or can i just add a second server to the UCCX cluster and use that for local access?
    Does HA mode mean that the UCCX Sub server wont be used unless the UCCX Pub falls over?
    Does it matter that i have less than 2meg on the MPLS Wan.
    Any help much appreciated..
    Thanks..
    T.

    Hi,
    I think the SRND for UCCX will answer all your questions.
    http://www.cisco.com/en/US/docs/voice_ip_comm/cust_contact/contact_center/crs/express_8_0/design/guide/uccx80srnd.pdf
    Roughly speaking:
    -- Yes you can have two UCCX nodes separated by WAN as long as the allowed round-trip time between the servers is 80 ms or less
    Instead of pinging from the server itself you better use the switch closesest to uccx (check the SRND)
    -- It is recommended by Cisco to have at least one cucm node across the WAN as well
    -- Agents can be located in any site
    --  For HA over the WAN heartbeats are send every second and failover is initiated if we miss 10 consecutive heartbeats (10 secs)
    -- I think you will have problems if you use a link less than 2 Mbps. Need to use higher
    You roughly need 1.2 Mbps for the communication between the UCCX servers over the WAN and 800 kbps for the communication between the UCCX and the CUCM over the WAN
    For additional information check chapter 4 of the above guide.
    Hope it helps,
    Christos

  • HT4976 Does it cost to send them?

    DOes it cost ( like a picture message) to send an emoji in a text?

    See the following:
    Visit www.apple.com/icloud/
    Creating an iCloud account- Frequently Asked Questions
    Apple IDs and iCloud
    iCloud- What you need to know | Macworld
    iCloud- Backup and restore overview

  • Does it cost to send a message on itouch on imessage

    does it cost to send a message in imessage

    See the following:
    Visit www.apple.com/icloud/
    Creating an iCloud account- Frequently Asked Questions
    Apple IDs and iCloud
    iCloud- What you need to know | Macworld
    iCloud- Backup and restore overview

  • Please help with setting up native mail app using Gmail with alternate email address

    I have an alternative email address setup such as [email protected] configured to use with my online Gmail account.  In the online account, I use the alternate email services smtp server so emails are sent correctly from that alias.
    Is there a way to setup the native mail app to use Gmail for mail, contacts, and calendar and use an alternate email address as the sender?  Right now I am syncing contacts and the calendar through the native mail app and using the Gmail mail app for my email.  It allows you to select from all of the emails setup on the Gmail account. 
    But for simplicity sake, I would like to consolidate to the native email app for all of my accounts - I also have an Exchange based work account.
    Thank you for the help.

    iCloud Help
    Creating an iCloud account- Frequently Asked Questions
    Apple IDs and iCloud
    iCloud: What version of Windows software am I using for iCloud?

  • TERRIBLE new email system

    Now we have to sign in all over again every ten minutes!  I am on & off email many times during the day, so this is a real **bleep**.  Plus, we have to verify Secret Question over & o ver again.
    I spent way  too much time in a phone chat with a nice Verizon guy, but it did not solve the problem.
    My other email accounts allow me to stay signed in, as Verizon did previously.  I don't believe they are changing the rules for MY security/protection; it must be something advantageous to THEM!
    When I  bring up Verizon email again from my desktop icon, it just shows the existing email -- but doesn' t give an immediate way to log back in!!!  I have to go through another whole song & dance to log back in.
    Plus, it still has a "register" icon which used to AVOID exactly what I'm complaining about.  It's still there!
    Whoever changed the procedure was careless and sloppy.  They don't give a **bleep** about the email users!
    What can we do to make Verizon retreat from this ridicuolous 10-minute rule!
    Thanks for any suggestions.
    Hypatia

    I agree, It i a pain to have to sign in every time you turn around

Maybe you are looking for