IPS Management with VMS

Hello,
I need an info for the following points.
Can i manage the IDS 4215 & 4240 wth IPS 5.0 with VMS 2.2 or higher version if available.
regards
Vijay Tandon

VMS has 2 management tools that deal with the IDS/IPS sensors:
Security Monitor for monitoring the alerts,
and IDS MC for configuring the sensors.
Upon initial release Security Monitor will be able to monitor the 5.0 sensors, but will monitor them the same as it does for 4.1 sensors. In other words Security Monitor will not have the new fields that are added to the alert in 5.0.
Security Monitor will be updated in a future release to handle the new format for 5.0 alerts with the new fields.
Upon initial release IDS MC will not be able to configure a 5.0 sensor. 5.0 sensors will have to be configured using CLI or IDM on the sensor itself.
IDS MC support for configuring 5.0 sensors is being added in a future IDS MC release.
Marco

Similar Messages

How to create an rule with action to subtract from the event log of Ips manager express console?

how to create an rule with action to subtract from the event log of Ips manager express console?, some knows of has an guide?.
Thank you.
Sent from Cisco Technical Support iPad App

Hi,
http://www.cisco.com/en/US/products/sw/secursw/ps2113/products_tech_note09186a0080bc7910.shtml
HTH
Luis Silva
"If you need PDI (Planning, Design, Implement) assistance feel free to reach us"
http://www.cisco.com/web/partners/tools/pdihd.html

Setting IPs in linux VMs

Hello.
I'm having the following problem.I want to set the IPs of a linux(centos 6.4) vm but i can't.
I have a)installed the 3.4 integration services b)used kernel 3.12.5 with hyper-v support.
In both cases i always get in dmesg
hv_utils: KVP: IP injection functionality not available
hv_utils: KVP: Upgrade the KVP daemon
hv_utils: KVP: user-mode registering done.
Moreover i use the following in order to read :
$VM = Get-WmiObject -Namespace 'root\virtualization\v2' -Class 'Msvm_ComputerSystem' | Where-Object { $_.ElementName -eq "FooBar" }
$VMSettings = $vm.GetRelated('Msvm_VirtualSystemSettingData') | Where-Object { $_.VirtualSystemType -eq 'Microsoft:Hyper-V:System:Realized' }
$VMNetAdapters = $VMSettings.GetRelated('Msvm_SyntheticEthernetPortSettingData')
$VMNetAdapters
I have also tried $VMNetAdapters = $VMSettings.GetRelated('Msvm_EmulatedEthernetPortSettingData') using a legacy card.
The previous code was taken from http://www.ravichaganti.com/blog/?p=2766
In a few words i would like to assign IPs in linux VMs.
Thank you in advance!
ps:I have now seen that 3.5 version of integration services has been released yesterday and it says that it supports static ip injection.So the previous versions didn't support ip injection at all?

Hi tasoss,
I did a little bit of research and unfortunately there are only two options for you:
a) Either upgrade to CentOS 6.5
or
b) Apply the fix yourself.
The following thread further attests to the above suggestions:
https://www.centos.org/forums/viewtopic.php?f=13&t=44118
If you'd like to compile the fix yourself then you should backport the following commits:
1) Drivers: hv: util: Correctly support ws2008R2 and earlier
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/drivers/hv/hv_kvp.c?id=3a4916050ba2e0f1d114ef540abdf02b2b173e61
2) Drivers: hv: remove HV_DRV_VERSION
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/drivers/hv/hv_kvp.c?id=cfc25993e81f3fa68481d062be634d33184d5eae
3) Drivers: hv: util: Fix a bug in version negotiation code for util services
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/drivers/hv/hv_kvp.c?id=6741335bc7294548ac95cb1f4671991ff30da193
Please let me know if you need more information.
Thanks,
Abhishek Gupta, Program Manager, Linux Integration Services

Configuring signature through IPS Manager in CSM3.0

I was trying to customize the siganture with IPS manager in CSM3.0.Any changes in CSM3.0 only displays in the window but looks like it is not been applied to IDSM2 which has IPS v5.1.The same change If I make through IDM to idsm2
it works fine.
This how I am testing: Just changed the sev level (low to high) in one of the bulit in siganture (say 2100 sweep)
from the IPS manager in CSM3.0.Then, when a traffic triggers that signature,the IPS Eventviewer still shows the sev level as "low" only.
But if I do the same changes though IDM I can see the sev level as "high" in the IPS event viewer5.0.
I also have 2 x 6500 with single IDSM2 on both switches.I could add only one IDSM2 to IPS manager (via DCR in comman services )and the other one I couldnot.Any suggestions please

Hi,Thanks for your response.IPS Sensor is configured.I use the same username/password with priv15 through IDM as well.
Here is the Problem Summary:
============================
We are using CSM3.0 for managing IDSM2 modules and we are having the following difficulties
I. Adding new IDSM2 sensor module into CSM3.0 through IPS
II.Customization of any signature
I.Adding new IDSM2 sensor module into CSM3.0 through IPS
We followed up the below procedures to add the IDSM2 modules
1.Go to CCS, device crenditials, select the type as cisco service modules and give the device crenditials like IP Address, username/password etc
2.Go to IPS Manager, under device tab we could see the IDSM2 module has been added.Then go to sensor group and re-import it.It works fine ie we could add and see the same in IPS manager.
Note: 1st sensor was successfully added where as the 2nd sensor couldnot be added in IPS
3.We could see that the same has been added into common services.But when we see in IPS Manager Device sensor or sensor group, we could not see the IDSM2 module.
Only the 1st sensor is showed in the IPS window.So we couldnot re-import the second sensor in to the specified group ( the group is same as the 1st sensor)
II.Customization of any signature:
We followed up the above said procedures ( as per I 1 to 2) to add the IDSM2 modules
Note: 1st sensor was successfully added where as the 2nd sensor couldnot be added in IPS
1.Go to configuration, select the IPS siganture5.1, apply some changes like
Changing the sev level from ?low? to ? high? for one of the built in signature ( ID 2100) by tuning. The changes appear in the CSM IPS console. But it doesn?t apply to the IDSM module. After this change, if the signature triggers IEV should show the changed level ? high?. But the IEV still shows the old level for the signature ID 2100 as ?low? only. The main screen under device tab still shows that configuration as pending.ie it looks like the changes made in CSM/IPS manager doesn?t applied to IDSM2 module
Note: If we make the same changes by using the IDM which behaves as expected.ie IEV shows the sev level for the tuned signatureID (2100) as ?high?
Please suggest us where are we missing?
Here are the details about the modules
Module: IDSM2 module
Ver: 5.1(1)S229.0V1.0
CSM : 3.0
IEV: 5.1.1

ASA5515X-IPS management 0/0 to LAN

I've recently setup two ASA5515X in A/S each with IDS. When I had them in the lab I was able to access the IPS's via IME but now that it's at the datacenter it's not working (of course). I've got the IPS configured with an IP on our LAN and the ASA's Management0/0 interface configured as:
interface Management0/0
no nameif
security-level 100
no ip address
management-only
The Management0/0 interface is plugged into a switchport on our LAN VLAN. From the ASA it's seeing the IPS as Up and I've verified the IPS network settings. Any ideas? Did I forget something? TIA!

When I run "show interfaces" I only get statistical information, nothing L2:
Interface Statistics
   Total Packets Received = 0
   Total Bytes Received = 0
   Missed Packet Percentage = 0
MAC statistics from interface Management0/0
   Interface function = Command-control interface
   Description =
   Media Type = TX
   Default Vlan = 0
   Link Status = Up
   Link Speed = Auto_1000
   Link Duplex = Auto_Full
   Total Packets Received = 0
   Total Bytes Received = 0
   Total Multicast Packets Received = 0
   Total Receive Errors = 0
   Total Receive FIFO Overruns = 0
   Total Packets Transmitted = 171
   Total Bytes Transmitted = 7182
   Total Transmit Errors = 0
   Total Transmit FIFO Overruns = 0
MAC statistics from interface PortChannel0/0
   Interface function = Sensing interface
   Description = Backplane
   Media Type = backplane
   Default Vlan = 0
   InlineMode = Unpaired
   Pair Status = N/A
   Hardware Bypass Capable = No
   Hardware Bypass Paired = N/A
   Link Status = Up
   Admin Enabled Status = Enabled
   Link Speed = N/A
   Link Duplex = N/A
   Total Packets Received = 988315
   Total Bytes Received = 77088570
   Total Packets Transmitted = 988315
   Total Bytes Transmitted = 77088570

My drive recently had to be replaced with a new one installed by Apple they reinstalled all my stuff from my time machine. Most my programs had to be updated which I managed with a little help from my friends, but the last one that I can't solve is

My IMAC OSX 10.6.8 2.8 GHz intelcore 2Duo 4GB 800 Mhz DDR2 SDRam recently had to have its hard drive replaced by apple thy actually had to give me a larger one because mine was no longer available,They also reinstalled all my programs and data from my 2 terrabite time machine back up. I got my system home and found that I had to upgrade most of my programs which I managed with a little help from my friends, but I still have one problem that I can't solve I have a Nikon Coolpix S6 that I have Been Syncing with my Iphoto since I've got it 3 years ago and now when I place it in the cradle the program reconizes it and says that it is going to start to import the new photos the little white wheel in the center of the screen starts spinning but nothing else happens. I checked all my connections and they are goog plus I even downloaded a nikon progam just to double check the camera & cradle and it works there but it wont pair off with my IPhoto.

First go to iPhoto Preferences, look in both General and Advanced tabs to make sure that things are set to import from camera into iPhoto.
Then if that doesn't help, connect the camera and open Image Capture in your Applications > Utilities folder and see if you can use Image Capture to reset the import path from the camera to iPhoto.
Image Capture: Free import tool on Mac OS X - Macgasm
Message was edited by: den.thed
Sorry John, I didn't see your post when I clicked the reply button. Dennis

How many domains can Prime Collaboration Advanced manage with the BE6000?

The BE6000 Administration guide states that "Most BE6K deployments have a single domain as part of a Standard Prime installation. Multiple domains are available with Prime Collaboration Advanced (available for purchase) that can be used for complex Business Edition 6000 deployments."
How many domains can Prime Collaboration Advanced manage with the BE6000 solution? How do we order and deploy Prime Collaboration Advanced with the BE6000 solution?

http://docwiki.cisco.com/wiki/System_Capacity_for_Cisco_Prime_Collaboration_10.0

How do I disable Firefox's Download functionality, I would like to use another download manager with Firefox...many thanks Bruce

Hi I am using version 3.6.15 with Windows 7, I would like to use another download program in place of Firefox's default option, how can I disable this in Firefox
Many thanks
Bruce Baxter

Use this extension to integrate an external download manager with Firefox. <br />
https://addons.mozilla.org/firefox/220/<br />
http://www.flashgot.net/whats

My ipod 4th generation wont show up on itunes or my compute, but there is a file for USB mass storage device in my device management with a yellow triangle next to it. how do i get it to sync? HELP!!!

my ipod 4th generation wont show up on itunes or my compute, but there is a file for USB mass storage device in my device management with a yellow triangle next to it. how do i get it to sync? HELP!!!

Here:
iOS: Device not recognized in iTunes for Windows
I would start with
Removing and reinstalling iTunes, QuickTime, and other software components for Windows Vista or Windows 7
or
Removing and Reinstalling iTunes, QuickTime, and other software components for Windows XP

Ask the Expert: One Management with Prime Infrastructure 1.2

With Tejas Shah
Welcome to the Cisco Support Community Ask the Expert conversation. This is an opportunity to learn and ask questions from Cisco expert Tejas Shah on One Management with Prime Infrastructure 1.2 Combining the wireless functionality of Cisco Prime Network Control System (NCS) with the wired functionality of Cisco Prime LAN Management Solution (LMS), Cisco Prime Infrastructure simplifies and automates many of the day-to-day tasks associated with maintaining and managing the end-to-end network infrastructure from a single pane of glass. The new converged solution delivers all of the existing wireless capabilities for RF management, user access visibility, reporting, and troubleshooting along with wired lifecycle functions such as discovery, inventory, configuration and image management, automated deployment, compliance reporting, integrated best practices, and reporting.
Tejas Shah is a senior technical marketing engineer for Cisco Prime Infrastructure and Collaboration products. He has deployed Cisco Prime Collaboration Manager at various customer sites to help customers monitor and troubleshoot their video infrastructure. In addition, he is part of the Network Operations Center team at Cisco Live events for six years. Shah joined Cisco in 1995 and was in the Technical Assistance Center team supporting various network management system products for more than six years.
Remember to use the rating system to let Tejas know if you have received an adequate response.
Tejas might not be able to answer each question due to the volume expected during this event. Remember that you can continue the conversation on the Wireless Mobility sub-community discussion forum shortly after the event. This event lasts through Sept 21, 2012. Visit this forum often to view responses to your questions and the questions of other community members.

Raun, please see my responses inline:
Can you go over the licensing method with Prime Infrastructure 1.2 please?
Raun, you can check out the following link for ordering guide at
http://www.cisco.com/en/US/products/ps12239/products_data_sheets_list.html
I currently have NCS and do NOT currently have LMS. I know I can move to Prime Infrastructure through Cisco Product Upgrade Tool. However, what I am confused about is do I still have to buy LMS to have LMS functionality in Prime Infrastructure 1.2?
==> Not at all. The converged product will give you basic management capability for routers and switches that LMS provided in this release. Feature/Functionality will keep on growing with upcoming releases.
If not, do the licenses I transfer into Prime Infrastructure 1.2 from NCS also work for devices to work under LMS?
==> Licensing is different than NCS or LMS. You don't have to transfer the license. Each install of Prime Infrastructure will have a unique UID string on which the licenses are based. A new license will be applied to the product.
Mean, can my currently 350 licenses be used for AP's as in NCS and routers in the LMS portion of Prime Infrastructure 1.2?
==> I would recommend getting a total count of your wired and wireless devices and match the right SKU based on that.
Hope this helps.. Let me know if you have any further questions,
Tejas

Version Management with Analysis workbooks? Doesn't save workbooks in BW Netweaver platform or BO Platform

SAP BusinessObjects Analysis, Edition for Microsoft Office - 1.4 SP6
SAP BusinessObjects BI Platform - 4.1 SP2
BW 7.3
SAP Logon pad - 7300.1.0.1074
We are trying to implement What-if analysis in Analysis Office tool like Revenue increase by N percentages. Excel formula applied for this in the adjacent column to keyfigures that is coming from BEx Query.
Here, I need to save the Workbooks in versions as V1, V2, V3, etc., for various percentages.
When I try to save this in BO platform, only the version V1 (first copy) is getting saved. But, the modified workbook is not getting saved with different name as V2 or V3, etc.,
When I try to save this Netweaver platform, even the first copy V1 is not getting saved. But it displays different versions in the save window before closing the Analysis Office application.
Please provide information on VERSION MANAGEMENT with Analysis Office.
Note: I see a difference in 'Open' and 'Save' window that is Roles are not visible in the 'Open Workbook' window but Roles are visible in 'Save Workbook' window.
Thanks,
Jeni.

SAP BusinessObjects Analysis, Edition for Microsoft Office - 1.4 SP6
SAP BusinessObjects BI Platform - 4.1 SP2
BW 7.3
SAP Logon pad - 7300.1.0.1074
We are trying to implement What-if analysis in Analysis Office tool like Revenue increase by N percentages. Excel formula applied for this in the adjacent column to keyfigures that is coming from BEx Query.
Here, I need to save the Workbooks in versions as V1, V2, V3, etc., for various percentages.
When I try to save this in BO platform, only the version V1 (first copy) is getting saved. But, the modified workbook is not getting saved with different name as V2 or V3, etc.,
When I try to save this Netweaver platform, even the first copy V1 is not getting saved. But it displays different versions in the save window before closing the Analysis Office application.
Please provide information on VERSION MANAGEMENT with Analysis Office.
Note: I see a difference in 'Open' and 'Save' window that is Roles are not visible in the 'Open Workbook' window but Roles are visible in 'Save Workbook' window.
Thanks,
Jeni.

File Manager with tree view

I've been using Cinnamon with the Nemo file manager for a while now but I'm wanting to remove Cinnamon and have only Openbox and Awesome installed. The only thing that's stopping me now is I'm unsure of what to use for a file manager. The feature of Nemo that I really like is the ability to show folders in tree view in the main pane when in detailed list view. I know that most of them probably have the tree feature in a side pane but I want it in the main pane.
I'd like something with as few dependencies as possible since I'm wanting a more minimal approach to my system. Nemo requires Cinnamon, I'm guessing that Nautilus has the feature that I'm looking for as well but that requires Gnome.
Can anyone recommend another file manager with this feature? Or is there any way to install Nemo/Nautilus without their desktop dependencies?

drcouzelis wrote:It doesn't look like Nemo requires Cinnamon. What do you mean?
claire ~ % pacman -Qi nemo
Name : nemo
[snip]
Depends On : libexif gvfs dconf desktop-file-utils exempi python2
cinnamon-desktop gnome-icon-theme libnotify libxml2
cinnamon-translations
I think this is what is meant.
d72 wrote:Can anyone recommend another file manager with this feature? Or is there any way to install Nemo/Nautilus without their desktop dependencies?
Not really, since those libraries are required to run the respective file manager.

I have windows 7 and my firefox client will not open, but it shows in task manager with 108k memory. Whats going on with my firefox?

As stated on the question I have windows 7 and meet all the requirements. But when i launch firefox It wont start, but it shows in task manager with 108k memory.

Got the exact same problem aswell, finally fed up with it now as i just started up firefox and 14 new windows opened because of this bug, luckily my computer can handle them but someone with a slower processor it would have been a nightmare, needs fixing ASAP.
Reverting back to 3.6.3 until this issue is solved. (link for anyone wanting to do the same below)
http://www.filehippo.com/download_firefox/7345/

How to install Oracle BPEL Process Manager with the BEA WebLogic

Hi ,
I will install Oracle BPEL Process Manager with BEA WebLogic 9.2(MP2). I have download orabpel_10133_WebLogic.zip ,then Modify the following mandatory installation properties in the orabpel_10133_WebLogic\bpelDomain.properties file:
# BEA_HOME is the path where Weblogic is Installed
BEA_HOME=/opt/bea
# JAVA_HOME is the path of jdk folder inside your weblogic
JAVA_HOME=/opt/bea/jrockit90_150_10
# DOMAIN_HOME is the path where you wish to create your domain called BPELDomain
DOMAIN_HOME=/opt/bea/user_projects/domains
# APPS_HOME is the path where you wish to copy your applications and adapters that are required for oracleBPELServer
APPS_HOME=/opt/bea/user_projects/apps
# BEA_HOME is the path where BPEL PM is Installed
BPEL_HOME=/home/oracle/bpel/product/10.1.3.1/OraBPEL_1/bpel
# DRIVER_TYPE is the datasource class that installable use to create a datasources for oracleBPELServer
DRIVER_TYPE=oracle.jdbc.xa.client.OracleXADataSource
# DB_URL is the url to connect to orabpel schema
DB_URL=jdbc:oracle:thin:@16.157.134.17:1521:orcl
# DB_USER is the user Id for orabpel shema in database
DB_USER=ORABPEL
#DB_PASSWORD is the password for orabpel schema in database
DB_PASSWORD=bpel
#BPEL_SERVER_NAME is the server i.e. to be created under BPELDomain
BPEL_SERVER_NAME=oracleBPELServer
#PROXY_HOST is the Host name of the proxy server
PROXY_HOST=www-proxy.us.oracle.com
#PROXY_HOST=
#PROXY_PORT is the Port where the proxy server is running
PROXY_PORT=80
#PROXY_PORT=
#NON_PROXY_HOST is the list of non proxy hosts that are divided by a | symbol
#NON_PROXY_HOST=*.oracle.com|*.oraclecorp.com|localhost|127.0.0.1|stbbn10|stbbn10.us.oracle.com
NON_PROXY_HOST=*.oracle.com|*.oraclecorp.com|localhost|127.0.0.1|stbbn10|stbbn10.us.oracle.com|16.157.134.135
When I run the setup.sh , it will report
BUILD FAILED
/opt/software/WL_Installables/build.xml:131: Traceback (innermost last):
File "./wl_scripts/bpelDomain.py", line 22, in ?
File "./wl_scripts/createGroupsAndUsers.py", line 4, in ?
weblogic.management.utils.AlreadyExistsException: [Security:090267]Group BpelGroup
Actully ,there is no BpelGroup in Weblogic. Does anybody know how to solve it ?

MAke sure you have not set ANY environment variable related to Oracle / BEA / Java / LD_library path. Use the following script to unset / set the initial settings:
#!/bin/sh
unset ORACLE_BASE ORACLE_HOME ORACLE_SID ORACLE_TERM
unset LD_LIBRARY_PATH LD_LIBRARY_PATH_64
unset CLASSPATH JAVA_HOME
export PATH=.:/usr/sbin:/usr/bin:/usr/local/bin:/opt/VRTS/bin
export BEA_HOME=/appl/oracle/products/9.2/weblogic
Marc
http://orasoa.blogspot.com

Is UDF required for this?!! or Can we manage with Node Functions?!!!

HI Gurus,
I have a requirement like below desc, Is UDF required for this?!! or Can we manage with Node Functions?!!!
Source File: ( File )
a) PO_TYPE
b) Style1
c) Style2
Note: Style1 leads to Headernode and Style2 leads to ChildNode, Style1 and Style 2 are interconnected.
Target File: ( Idoc )
a) Header Node ( EHDRNDE)
b) Child NOde ( CHLDNDE)
And my question is.... I have to populate Header Node and Child Node in target side on certain conditions of the source file. they are;
I) Whenver a different style1 comes in file...I have to create a Headernode for that in target file. Style1 can contain number of Style2 nodes with the same node. like
Ex:
i) Style1 -
Style2a, Style2b, Style2c
ii) Style1 ....... Style2aa, Style2ab.
For this above requirement, I have to create corresponding target nodes for Header ( Style1 ) and as well as for Child ( Style2)
for ex1: it should be one Header node in target and 3 corresponding child nodes
for ex2 : It should be One Header Node and 2 child nodes
For this requirement...can we use node functions....if it is...could you please help me.
....Stallin
Edited by: stallin xavier on May 1, 2008 4:18 AM

Hi,
You can do it by using node function as well as UDF also.
1) If your sequence is sorted and always come in sorted order only e.g. 1st come only style1 node and child node and then come all nodes from style 2 then u can use node function.
2) for parent node use collpse context then remove context.
3) for child node 1st differntiat according to your condition and then use split by value(value change)
4) If occurance of style1 node and style2 node is not fixed then you don't have any option you have to write UDF.
I think this will help you.
Regards,
Rohit.
Reward points if helpful

IPS Management with VMS

Similar Messages

Maybe you are looking for