Modules: | 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | All |

Module 5: Router Intrusion Detection, Monitoring, and Management

5.1 | IOS Firewall IDS

5.1.1 | IDS Sans- http://www.sans.org/resources/idfaq/ Ceria- http://www.cerias.purdue.edu/coast/intrusion-detection/ Talisker- http://www.networkintrusion.co.uk/index.htm IDS Sensors:

Network Based
Cisco Products and Services- http://www.cisco.com/en/US/
products/hw/vpndevc/ps4077/index.html

Host Based
Cisco Products and Services- http://www.cisco.com/en/US/
products/hw/vpndevc/ps976/index.html

5.2 | Setting up the Cisco IOS Firewall IDS

5.2.3 | Cisco Intrusion Detection System (IDS) 4200 Sensors http://www.cisco.com/en/US/products/hw/vpndevc/ps4077/index.html Cisco Catalyst 6500 Series Intrusion Detection System (IDSM-2) Services Module http://www.cisco.com/en/US/products/hw/modules/ps2706/ps5058/index.html

5.3 | Monitoring with Logging and Syslog

5.3.5 | The BSD syslog Protocol http://www.ietf.org/rfc/rfc3164.txt Reliable Delivery for syslog http://www.ietf.org/rfc/rfc3195.txt Carnegie Mellon
http://www.cert.org/security-improvement/implementations/i041.08.html

Security Issues with Syslog
IETF
http://www.employees.org/~lonvick/index.shtml

5.3.8 | Kiwi Enterprises http://www.kiwisyslog.com/products.htm MikroTik Utilities http://www.mt.lv/3index.html#utils Mac Netlogger
http://www.laffeycomputer.com/netlogger.html
ClassicalGuitar.net
http://www.classicalguitar.net/brian/apps/syslogd/
Winsyslog
http://www.winsyslog.com/en/

5.4 | SNMP

5.4.2 | http://www.cisco.com/en/US/tech/tk648/tk362/ technologies_tech_note09186a0080094489.shtml
5.4.3 | SNMP Link.org http://www.snmplink.org/SNMPv3.html CiscoWorks VPN Solutions Center http://www.cisco.com/en/US/products/sw/netmgtsw/ps2327/index.html AdventNet SNMP Utilities
http://www.adventnet.com/products/snmputilities/index.html

MG-SOFT (supports SNMPv3)
http://www.mg-soft.si/mgMibBrowserPE.html

SNMP Research International
http://www.snmp.com/products/enterpol.html

HP Openview
http://www.openview.hp.com

5.4.4 | http://www.cisco.com/en/US/products/sw/iosswrel/ ps1830/products_feature_guide09186a00800878fa.html http://www.cisco.com/en/US/products/sw/iosswrel/ ps1839/products_command_reference_chapter09186a008010a3f8.html
5.4.5 | SNMP Trap Watcher http://www.bttsoftware.co.uk/snmptrap.html SolarWinds.net http://solarwinds.net/Download-Tools.htm Loroit
http://www.llecointe.com/downloads.html

MRTG
http://www.mrtg.org/

Dartware
http://www.dartware.com/snmpwatcher/
index.html

Net-SNMP
http://net-snmp.sourceforge.net/

SimpleWeb
http://www.simpleweb.org/

SNMPLink
http://www.snmplink.org/

5.5 | Testing and Security Validation

5.5.3 | Software Center http://www.cisco.com/public/sw-center/index.shtml
5.5.4 | VA Linux http://ncat.sourceforge.net/ Nessus http://www.nessus.org/ NMAP
http://www.insecure.org/nmap/
RAT - Center for Internet Security
http://www.cisecurity.org/

5.6 | Security Device Manager (SDM)

5.6.2 | http://www.cisco.com/en/US/products/sw/ secursw/ps5318/products_user_guide_list.html
5.6.3 | http://www.cisco.com/en/US/products/sw/secursw/ ps5318/prod_installation_guide09186a008017dcd0.html#92034

| Close Window |

| All contents copyright © 2002 Cisco Systems, Inc. All rights reserved.