Using Cisco IPS Device Manager
The Cisco IPS Device Manager (IDM), shown in Figure 2-1, is a superb web-based graphical user interface (GUI) for managing a single IPS device. To maintain security, the IDM and the client engage in Transport Layer Security (TLS) and Secure Sockets Layer (SSL). The server uses a trusted host certificate to verify the identity of the management workstation. The client uses a server certificate to ensure the identity of the IPS device.
)
Figure 2-1 Cisco IDM
The Cisco IPS Sensor Software Version 7.0 uses Security Device Event Exchange (SDEE) for communication, but it still relies on Remote Data Exchange Protocol (RDEP2) to communicate configuration and IP log information.
SDEE is an IPS communications protocol developed by Cisco. Through SDEE, IPS Sensor Software Version 7.0 provides an application programming interface (API) for the sensor itself. SDEE is an enhancement to the earlier RDEP.
The Cisco IDM runs on the following:
- Windows XP Professional (32 bit)
- Windows Vista, Business and Ultimate (32 bit)
- Windows 2003 Server
- U.S. or Japanese versions of the previously listed Windows versions
- Red Hat Linux Desktop Version 4
- Red Hat Enterprise Linux Server Version 4
- Java SE 5.0 or 6.0
- Internet Explorer 6.0 or 7.0, or Firefox 2.0
To log in to the IDM, enter https://sensor_ip_address. The default address is 10.1.9.201 if you did not provide one during setup.
After you are in the IDM, you can configure the general network settings (such as hostname and IP address) by choosing Configuration, Sensor Setup, Network.
To display or re-create the sensor's SSH host key, choose Configuration, Sensor Setup, SSH, Sensor Key.
To reboot the sensor, choose Configuration, Reboot.
To shut down the sensor, choose Configuration, Shut Down Sensor. For both the reboot and shutdown, the sensor delays for 30 seconds. The logged-in users are notified that the sensor is shutting down.