Cisco CS-MARS-20-K9 - Security MARS 20, Руководство пользователя

Страница: 221 / 588

6-31
User Guide for Cisco Security MARS Local Controller
78-17020-01
Chapter 6 Configuring Network-based IDS and IPS Devices
NetScreen IDP 2.1
c.
Delay between SNMP notification (mins ): (Example: 1 min)
Step 6 Click OK to return to main screen.
MARS Side Configuration
Add Configuration Information for Symantec ManHunt 3.x
Step 1
Click Admin > System Setup > Security and Monitor Devices > Add
Step 2
From the Device Type list, select Add SW Security apps on a new host or Add SW security apps on
existing host
Step 3
Enter the Device Name and IP addresses if adding a new host.
Step 4 Click Apply
Step 5
Click Reporting Applications tab
Step 6 From the Select Application list, select Symantec ManHunt 3.x
Step 7
Click Add
Step 8
For attack path calculation and mitigation, specify the networks being monitored by the sensor. Do one
of the following:
To manually define the networks, select the Define a Network radio button.
a. Enter the network address in the Network IP field.
b.
Enter the corresponding network mask value in the Mask field.
c. Click Add to move the specified network into the Monitored Networks field.
d.
Repeat as needed.
To select the networks that are attached to the device, click the Select a Network radio button.
a.
Select a network from in the Select a Network list.
b.
Click Add to move the selected network into the Monitored Networks field.
c.
Repeat as needed.
Step 9 To save your changes, click Submit .
Step 10
To enable MARS to start sessionizing events from this module, click Activate .
NetScreen IDP 2.1
IDP-side Configuration
Step 1 Click NetScreen-Global Pro > IDP Manager > IDP .
Step 2
Log in to the IDP Manager.