Cisco CSM - Has anyone deployed it in their environment for IDS/IPS devices

We are an MSP and are evaluating Cisco CSM to manage about 50 IDS/IPS devices. Each of these devices has their own customer signature policy.
Does anyone use it in their production environments? Do you find it useful?
Regarding policy management for devices that already have a signature policy, I know you can discover the policy, what we want to do is take the current discovered policy, modify it if we need to and then re-deploy it to the device. I'm finding that this is all read only once the policy is discovered.
Is there a way to modify the signature, for example, adding a logging parameter and then re-deploy?
Just curious if others had similar experiences with CSM.
Thanks!

haxworthy,
I currently use CSM to manager a variety of IPS devices (IOS IPS, 42xx Sensors, 65xx-series blades). The policies vary on some devices. CSM works wonderfully. CSM discoveries the various policies on the device on an individual basis. Policies can then be edited on a per-sensor basis or on a group level. Has worked wonderful in our environment. A nice upgrade from the old IPSMC. Let me know if you have any other questions.
-Mike
http://cs-mars.blogspot.com

Similar Messages

  • Has anyone deployed converged access with 3850 switches and 5760 WLCs?

    Has anyone deployed a converged access network architecture with 3850 switches and 5760 WLCs? I have done lots of projects with the 5508 WLCs In a centralized deployment. Basically with this design, I manage 2 logical networks as the wireless network is an overlay over the wired network. I can design firewall to segregate traffic between the wired and wireless hence I can carry both staff and guest traffic.
    Now Cisco is telling us that there is new design such that the dats plane traffic can be dropped locally through the 3850 switched. I am not sold on this and have not found any recommended best practices on when should we use a converged access architecture.
    Pros
    With converged access, data traffic is terminated at the MA which is on the switches, hence the WLC will not be a bottleneck? This is to prepare adoption for 802.11ac?
    Less hops for voice calls from user A to user B as data control traffic is dropped locally.
    Cons
    Now how do I segregate guest and staff traffic if my security folks say I need a firewall?
    Troubleshooting wireless client mobility will be a nightmare as the 3850 switches are MA.
    Pushing and upgrading code for the Code will mean upgrading the stack of switches in the LAN riser. This will be painful in a huge campus environment like an university.
    Can someone convince me why would a customer choose converged access?
    Sent from Cisco Technical Support iPad App

    They choose CA because of the capwap termination at the switch. You can still use a 5508 and tunnel guest to a DMZ segment if you wish. You will need a 5508 though is you want to tunnel traffic to an anchor WLC.
    Sent from Cisco Technical Support iPhone App

  • Has anyone tried to have their glass screen repaired on the ipod touch

    I've gotten a lot of results searching for repair on the glass screen, even sites that have kits for doing it yourself, has anyone tried to have their screen repaired this way?  I know about the trade in offers, but I've seen repairs as low as $25.

    Some users posted that they did it themselves successfully.
    Some tried themselves and ended up not working at all afterwards.
    Some had a local third-party do it and it did not work satisfactorily afer it was returned.

  • Has anyone had issues with their itunes not coming up?

    Has anyone had issues with their itunes not coming up?  I keep getting error message 13014.  I just bought a new classic ipod and am not sure if this is the problem.

    Hi
    Your new iPod has certain operating system requirements. Does your iMac meet those requirements?
    http://www.apple.com/ipodclassic/specs.html
    3rd Column on the right hand side, about a 3rd of the way down. To find out which version of iTunes you have, launch it and select "About iTunes" from the iTunes menu.
    HTH?
    Tony

  • Has anyone develped an EM plug-in for Cisco switches or routers

    Folks,
    Has anyone develped an EM plug-in for Cisco switches or routers? Please reply to this thread if you have developed one and would like to share your experience in developing this plug-in?
    Thanks,

    It's probably not the conversion from CMYK to RGB that's causing the problem, but color profile (ICC) embedding in Photoshop. Fireworks doesn't read color profiles. You might be able to create an action to remove the color profile in Photoshop and then batch process the images with it.

  • HT1689 Has anyone had trouble opening their nook and updating it?

    Has anyone having trouble updating their nook or even going into it to read any of their books?

    If it's getting hot you need to replace it,  As a suggestion I would take it later this morning to your local Verizon Corporate and have them look at it and see if they can DOA it,  since the screen is bad and it is getting hot it's considered a Manufacturing issue and since the phone carries a 1 year warranty Hopefully they can give you another Brand new one I'm not going to Guarantee they will they may order you a Certified Good as new one but hopefully the Rep or Manager of the store will understands it's out of your control the phones screen went dead and the phone gets hot,
    So that is what I'd do get some sleep and Later in the morning or afternoon if you can Visit your local store and see what they can do for ya and Let me know on this thread..  I wish ya good luck..   b33

  • Has anyone had to abandon their current voice plan when activating iphone?

    Has anyone had to change their current voice plan when activating the iphone? I want to get the iphone, but the restrictions are killing me. I can't apply my 24% business discount, no MMS capabilities, no video and the ATT rep told me that I would have to change my current voice plan. The voice plan is the biggest issue. I can live with the others.
    I current have a family share plan with 850 anytime minutes (unlimited nights and weekends and M2M) for $59.99/month. This plan is way better than anything ATT is currently offering. Has anyone had to deal with this?

    I was told when I bought the phone from the Rep at the AT&T store that I would get a 15% discount off my bill for work.. knowing she sold me an iPhone. Emails have went back and forth since October where she said I had to wait a couple of montsh for it process. After calling AT&T customer service and asking them why that my discount column on the bill shows 0.00 and going to the store I bought it and talking to another rep, they both said it doesn't apply to iPhone accounts. After sending another email to the original rep, she goes back on her word and confirms it's not happening. Thank God its a cool phone, otherwise I'd hang up AT&T over that $15/mo I've been missing out on.

  • Has anyone tried to connect their xbox?

    Has anyone tired to connect their xbox using the wireless Networking Adapter? Every time I try, it tells me that it is not connected. Anyone have any suggestions?

    I believe there is no issue connecting the Xbox 360 via Wired Ethernet (either an ethernet cable directly from Xbox 360 to TC, or via a wired Ethernet bridge). The problem is, as you said, when trying to connect wirelessly via the Xbox 360 Wireless USB adaptor.
    Did Apple say anything more about the fix? Timescales? I'm itching to get a Time Capsule, but not until this issue is fixed.
    Also, if I set the TC to 802.11n with backwards compatibilty (forget the exact option), will this slow the entire network down if I have a mixture of 802.11n and 802.11g devices connecting to it? I read somewhere that it will only slow the network down whilst the actual devices in question are transmitting. Is this correct?

  • Has anyone had trouble with their bluetooth headset? (even after pairing)

    Has anyone had trouble with their bluetooth headset? I have a Motorola H700 that pairs with the iphone but takes about 10 seconds after i hit send for the connection between the phone and the headset to be established. I also get allot of static when the headset is more than 3 feet away from the phone. (this headset worked perfectly @ about 40' with a Motorola Razr I had)

    Hi jmsemac,
    I understand you are experiencing some issues with Bluetooth connections. I have linked to an article which provides some troubleshooting steps you may want to explore: 
    iOS: Troubleshooting Bluetooth connections - Apple Support
    Thank you for contributing to Apple Support Communities.
    Take care,
    Bobby_D

  • Has anyone had trouble ejecting their ipod from itunes after syncing?

    Has anyone had trouble ejecting their ipod from itunes after syncing?

    what trouble are you having? if after it says sync complete, and then you click on the eject arrow next to xxxx's ipod and it still says Do not Disconnect after ten minutes?  I just pull the cable. you can shut down the computer first if you want. never done any damage so far.

  • HT201272 Has anyone had problems with their apps downloading to their ipods?

    Has anyone had problems with their apps downloading to their ipod? Or know why all apps have been removed from their ipod?

    Possibly, but what problems?  Any errors?
    If you are really running iOS 3.1.2 as your signature suggests, that is likely the issue.  Many apps now require iOS 4.3 or higher.

  • Has anyone come up with a spreadsheet for investment tracking?

    Has anyone engineered a fairly simple spreadsheet for investment tracking?
    I'm using the Office 2008 Excel template, but it seems squirrelly/fragile. I don't want to get all my info into it and have it fold on me.
    Thanks,
    John
    MBP, Mavericks

    There are hundreds  a quick Google search found:
    http://office.microsoft.com/en-us/templates/my-financial-portfolio-TC103827362.a spx

  • Has anyone created a NI-VXI driver for the Ardence RTX operating system?

    Has anyone created a NI-VXI driver for the Ardence RTX operating system?
    a VXI instrument through a PCI-VXI-8335 card (in the PC) talking to a PCI-VXI-8345 card (in the VXI chassis) via MXI-3, Has anyone created a PCI-VXI-8335 card  driver for the Ardence RTX operating system?

    Now  i want  develop driver on RTX,my hard platform is similiar(PCI8335+VXI8340+1418A),and after i read the PCI baseaddress,i find PCI8335 only has memory-map,so that means if i want to driver this board ,so i take following steps list below:
    1.use Rtmapmemory() to map the baseaddress to virtual address
    2.using memset() or memcpy() to driver the 1418A board
    is this right?
    if you can give me some hints,thanks 
    or you can contact me :[email protected] 

  • Has anyone built a job scheduling interface for BMC's Control-M product

    Has anyone built a job scheduling interface for BMC's Control-M product?  If so - how did you notify control-m when the XI job completed successfully versus unsuccessfully?

    Have you received any help on this?  I would like to know the answer to this question.

  • Has anyone heard of an iShine sleeve for an iPhone?

    Has anyone heard of an iShine sleeve for an iPhone 4s?

    http://www.ishinesleeve.com
    Seems awfully expensive for a piece of microfiber...

Maybe you are looking for

  • CONTROL_RECIPE_DOWNLOAD - Error in XMIIRFC01

    Hi I am trying to get the control recipe from ECC to MII via the RFC CONTROL_RECIPE_DOWNLOAD and got the following errors. java.lang.RuntimeException: ConfirmTID failed. Registered TID=0E02202047274BEA09631C2D. Neither commit no rollback arrived on t

  • Using robocopy to copy files from a network share over a WinRS command line session

    Hello, Preface: Using server 2008 enterprise. I can't seem to get robocopy to function over WinRS and I'm not sure where the problem actually lies.  Running robocopy locally on the computer does work fine, but as soon as I try to run it through a rem

  • Photo resolution in iBooks

    I've ordered a few of the iBooks before -- the early versions were gorgeously printed, but recent ones have been sort of substandard print jobs - as I'm just about to order another one, I decided to do a PDF version first to see how things look, and

  • HT1491 iTunes Ringtone purchases, not appearing...

    I purchased an Album of Ringtones from iTunes directly to my iPhone 4S, and they do not appear in my Sounds Settings, and therefore, I cannot use them. How do I use them?  I've googled this, and I found that I needed to go into my iTunes, Device, Rin

  • Now to define new formulas for pricing?

    can any one please tell me a business scenario where one needs to define a new pricing formula, and how can one can do that in the system? points will be rewarded immediately. thanks PR