6-29
User Guide for Cisco Security MARS Local Controller
78-17020-01
Chapter 6 Configuring Network-based IDS and IPS Devices
Symantec ManHunt
Step 3
Enter the
Device Name
and
IP addresses
if adding a new host.
Step 4
Click
Apply
Step 5
Click
Reporting Applications
tab
Step 6
From the
Select Application
list, select
Snort Snort 2.0
Step 7
Click
Add
Step 8
For attack path calculation and mitigation, specify the networks being monitored by the sensor. Do one
of the following:
To manually define the networks, select the
Define a Network
radio button.
a.
Enter the network address in the Network IP field.
b.
Enter the corresponding network mask value in the Mask field.
c.
Click
Add
to move the specified network into the Monitored Networks field.
d.
Repeat as needed.
To select the networks that are attached to the device, click the
Select a Network
radio button.
a.
Select a network from in the Select a Network list.
b.
Click
Add
to move the selected network into the Monitored Networks field.
c.
Repeat as needed.
Step 9
To save your changes, click
Submit
.
Step 10
To enable MARS to start sessionizing events from this module, click
Activate
.
Symantec ManHunt
Symantec ManHunt Side Configuration
Step 1
Login to the Symantec ManHunt with appropriate username and password.
Step 2
In the main screen, click
Setup > Policy > Response Rules
, then Response Rules window will appear.
