Cisco CS-MARS-20-K9 - Security MARS 20, Руководство пользователя

Страница: 233 / 588

7-7
User Guide for Cisco Security MARS Local Controller
78-17020-01
Chapter 7 Configuring Host-Based IDS and IPS Devices
Cisco Security Agent 4.x Device
Step 10
In the File name box, enter the name for this file, for example, csahosts.txt, and click Save .
Step 11 Upload the generated file to an FTP server where the MARS Appliance can access it.
You will return to this file when adding the CSA device n the MARS web interface, as defined in Add
and Configure a CSA MC Device in MARS, page 7-7 .
Add and Configure a CSA MC Device in MARS
Before you can identify the agents, you must add the CSA MC to MARS. All CSA agents forward
notifications to the CSA MC, and the CSA MC forwards SNMP notifications to MARS. Once you define
the CSA MC and activate the device. MARS can discover the agents that are managed by that CSA MC.
However, you can also chose to manually add the agents.
To add a CSA MC to MARS, follow these steps:
Step 1
Click Admin > Security and Monitor Devices > Add .
Step 2 From the Device Type list, select Add SW security apps on a new host or Add SW security apps on
existing host .
Step 3
Enter the Device Name and IP addresses if adding a new host.
Step 4 Click Apply .
Step 5
Click Reporting Applications tab.
Step 6 From the Select Application list, select Cisco CSA 4.x .
Step 7
Click Add .
Step 8 The Management Console page appears.
Step 9
Click Submit, and then click Done.
Step 10
Do one of the following:
•
To save your changes and allow the CSA agents to be discovered automatically, click Submit , and
then click Done.
•
To add agents using an exported hosts report, continue with Add CSA Agents From File, page 7-9 .
•
To add a single agent manually, continue with Add a CSA Agent Manually, page 7-8