You Are Here : Forums Sunday, September 07, 2008
     
Activeworx.org Forums
 
  Forum  IDS Policy Mana...  IDS Policy Mana...  Activeworx Security Center integration - need an explanation of how it works
Previous Previous
 
Next Next
New Post 8/7/2007 3:18 PM
  Ray
55 posts
6th Level Poster


Activeworx Security Center integration - need an explanation of how it works 

Hi Jeff,

 

Would you please explain how the IDSPM integration with Activeworx Security Center works? We just upgraded to v4 and would like multiple people to be able to maintain the Snort sensors, something that's not possible with the standalone IDSPM version.

 

Do we run the IDSPM executable on each desktop, on the Activeworx server or what? Etc. :-)

 

Thanks,

 

Ray

 
New Post 8/7/2007 4:09 PM
  Jeff Dell
233 posts
www.activeworx.com
1st Level Poster


Re: Activeworx Security Center integration - need an explanation of how it works 

Before I get started.. IDSPM for ASC v4 is still in beta. A final will be out in the coming weeks...

 

To test IDSPM v2.1 beta, you will need ASC v4.0.0.19 or newer and IDSPM for ASC v2.1.0.16 or newer. Both are available in their respective download locations. I would strongly recommend using IDSPM for Activeworx Security Center(ASC) if you have multiple users. Or would like a single place to not only edit policies but also view events. To get it setup you will need to do a couple of steps...

 

1. Install IDSPM 2.1 for ASC on each desktop that will be using IDSPM.

2. In the settings form, set enable IDS Policy Manager on each desktop. (This will automatically extend the schema)

3. In the settings form, set the oinkcode. This needs to be done only once.

4. You are now ready to use IDSPM. You will see an icon on the side bar and the top menu bar.

 

a few things you should also know.

1. When viewing IDS Events, you know have the ability to view the rule, enable the rule, set suppressions, etc...

2. In the final of IDSPM v2.1, you will be able to import all you existing sensors and policies from IDSPM Stand Alone.

 

Once you get it setup and open it within ASC, it is almost exactly the same as IDSPM Stand Alone.

 

Cheers,

Jeff

 

 

 
New Post 8/8/2007 12:21 AM
  Ray
55 posts
6th Level Poster


Re: Activeworx Security Center integration - need an explanation of how it works 
Thanks for the detailed and prompt response. I can't wait for the final release.

Ray
 
Previous Previous
 
Next Next
  Forum  IDS Policy Mana...  IDS Policy Mana...  Activeworx Security Center integration - need an explanation of how it works
 
 
Copyright 2000-2007 by Activeworx, Inc.
All trademarks and copyrights on this page are owned by their respective owners.