| 5.2 |  | Setting up the Cisco IOS Firewall IDS |
| 5.2.2 |  | Initialize IOS Firewall IDS |

| Set notification type Figure displays some of the commands to set the notification type, the router post office parameters, the IDS Director Post Office parameters, the protected network definition, and the maximum queue size for holding alarms on the router.

- Use the

ip audit notify global configuration command to specify the methods of alarm notification. Logs can be sent to an IDS management platform such as the VMS Security Monitor server, the router internal log, or a Syslog server. Use the no form of this command to disable event notifications.
- Use the
ip audit po local global configuration command to specify the local post office parameters used when sending alarm notifications to the Cisco Secure IDS Director. Use the no form of this command to set the local post office parameters to their default settings.
- Use the
ip audit po remote global configuration command to specify one or more set of post office parameters for the Cisco Secure IDS Director receiving alarm notifications from the router. Use the no form of this command to remove a Cisco Secure IDS Director Post Office parameter as defined by host ID, organization ID, and IP address.
- Use the
ip audit po protected global configuration command to specify whether or not an IP address is on a protected network. Use the no form of this command to remove network addresses from the protected network list.

Set notification queue size
Use the

ip audit po max-events global configuration command to specify the maximum number of event notifications that are placed in the router event queue . The default is 100. Use the no version of this command to set the number of notifications to the default setting.