Enterasys Intrusion Prevention System, Reporting Manual

Page: 11 / 122

Enterasys IPS Analysis and Reporting Guide ix
About This Guide
The Enterasys
®
Intrusion Prevention System (IPS) is a solution consisting of an Intrusion
Detection System (IDS), active response, and intrusion prevention. This guide describes the
reports available with Enterasys IPS version 7.5 or higher using the web-based GUI. The first part
of the book describes the current reporting tools. Legacy tools are described in the last chapter of
the book.
Reporting tools available using the command line are described in the Enterasys Intrusion
Prevention System Command Line Tools Reference .
Intended Audience
This document is intended for analysts who are responsible for generating reports about intrusive
attacks.
Version Support
This guide supports Enterasys Intrusion Prevention System Version 7.5, and higher.
Related Documents
The Enterasys IPS user documentation listed below is available from
https://extranet.enterasys.com/downloads .
Enterasys IPS Document Title Description
Appliance Hardware Installation Guide Describes how to set up the Enterasys IPS appliances.
Configuration Guide Describes how to configure Enterasys IPS using GUI
management tools. It also describes the placement of Enterasys
IPS components within your network.
Creating Host Sensor Policies Describes how to create custom Host Sensor policies.
Creating Network Sensor Policies and
Signatures Describes how to create custom Network Sensor policies and
signatures.
Analysis and Reporting Guide Describes the Enterasys IPS reporting tools. Reporting tools
available from the command line are described in the
Command
Line Tools Reference .
Command Line Tools Reference Describes the forensics command line tools you can use to
analyze the events database or a single dragon.db file.