From: Eric Hoffman (skeetin@hotmail.com)
Date: Tue Sep 28 2004 - 00:02:02 GMT-3
Hi,
I vaguely recall doing something like that in the 3.x or 2.x code..... but
I recall only having the router send a syslog message to the sensor when a
denied acl took a hit, and then the sensor passed the denied acl message to
the director....
I scanned the 4.1 docs, and didn't see anything about syslogs. Whenever I
have deployed a 4210 or 4215, I usually used VMS for reporting features...
VMS would receive the messages from the sensor, and then you can then
forward those messages off in whatever method you want.... (email, batch
script, etc).
You might want to try the Cisco netpro, they might have some more info to
help....
HTH,
E
>
>I think I saw a question about this topic earlier. I could not find a
>response in the archives.
>
>Is it possible to send alerts from a 42XX IDS appliance to a syslog server
>?
>
>Has anyone of this forum ever done this or can point to revelent material
>to accomplish this?
>
>Thanks,
>
>Dennis
This archive was generated by hypermail 2.1.4 : Fri Oct 01 2004 - 15:00:50 GMT-3