6-35
User Guide for Cisco Security MARS Local Controller
78-17020-01
Chapter 6 Configuring Network-based IDS and IPS Devices
Enterasys Dragon 6.x
Step 3
Enter the
Device Name
and
IP Addresses
if adding a new host.
Step 4
Click
Apply
Step 5
Click
Reporting Applications
tab
Step 6
From the
Select Application
list, select
Enterasys Dragon 6.x
Step 7
Click
Add
.
Add a Dragon NIDS Device
Step 1
Click
Add Sensor
.
Step 2
Select existing device or
Add New
device.
Step 3
Enter the
Device Name
,
Sensor Name
, and its
Reporting IP
address.
•
Device Name
– the DNS entry for this device
•
Sensor Name
– the name as it appears in the console
•
Reporting IP
– the IP address that the agent uses to send logs to the console
Step 4
Add the interfaces, which important information for attack path calculation.
•
For multiple interfaces, click
Add Interface
, and add the new interfaces’s name, IP address and
mask.
Step 5
For attack path calculation and mitigation, specify the networks being monitored by the sensor. Do one
of the following:
To manually define the networks, select the
Define a Network
radio button.
a.
Enter the network address in the Network IP field.
b.
Enter the corresponding network mask value in the Mask field.
c.
Click
Add
to move the specified network into the Monitored Networks field.
d.
Repeat as needed.
To select the networks that are attached to the device, click the
Select a Network
radio button.
a.
Select a network from in the Select a Network list.
b.
Click
Add
to move the selected network into the Monitored Networks field.
c.
Repeat as needed.
Step 6
To save your changes, click
Submit
.
Step 7
Click
Done
when you are done adding the sensor.
Step 8
To enable MARS to start sessionizing events from this module, click
Activate
.
