Cisco IME - IPS / IDS Management


IPS Manager Express is a nice utility to use if you're managing IPS / IDS Modules. From a central interface you can do image upgrades, license upgrades, signature updates, reporting, and more. Overall





From the above images you can see the state and the health of the IPS / IDS modules or appliances that you manage.


Some of the Supported  IDS / IPS Systems are :


• Cisco IPS 4240, 4255, 4260, and 4270 Sensors
• Cisco ASA 5500 Series Advanced Inspection and Prevention Security Services Modules and Cards
• Cisco ASA 5500 Series IPS Security Services Processors
• Cisco ASA 5500 Series Adaptive Security Appliances
• Cisco IPS Advanced Integration Module (AIM)
• Cisco Catalyst® 6500 Series Intrusion Detection System (IDSM-2) Services Module

IPS Manager utilizes IOS version 6.1 and later. You can also add up to 10 systems to manage inside the central system. 

Comments

Post a Comment

Popular posts from this blog

HULC LED PROCESS - 3750 High CPU

Image
If you're looking at a switch and you see the HULC LED Process running high. The HULC LED process does some of the following tasks: 1. Check link status on every port 2. If the switch supports POE, it checks to see if there is a power device 3. Transceiver checks 4. Fan status updates 5. Set LED ports 6. Check on temperature status Overall the HULC LED Process is a monitoring process running. During looking into this I turned off all non-used ports since it checks the link status. Then I made sure the environment was good. Two Cisco Bugs: http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCsi78581 http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCtn42790
Read more

%PLATFORM_UCAST-4-PREFIX: --------- TCAM 3750 Switch

Image
 %PLATFORM_UCAST-4-PREFIX:  One or more, more specific prefixes could not be programmed into TCAM and are being covered by a less specific prefix, and the packets may be software forwarded So what is TCAM ? Ternary Content Addressable Memory is used in multi-layer switching also know as Layer 3 switching. The switches forward the packets and frames at the speed of the line by using ASIC hardware. Normally switches make there forwarding decisions based on Layer 2. TCAM is used for Layer 3 components and other features such as QOS and ACES ( Access List ).  Check TCAM and usage of templates being used in the device.  show sdm prefer ? ! This will show us the templates that can be used in the device to give more resources to one feature or the other. For example the default is the equal resource distribution while the routing gives more resources to Layer 3 routing. show sdm prefer ! The command without the "?" will show us what we are currently r
Read more