Filter
Top Products
11-4
Cisco Intrusion Prevention System CLI Sensor Configuration Guide for IPS 7.1
OL-19892-01
Chapter 11 Configuring External Product Interfaces
Configuring the CSA MC to Support the IPS Interface
Configuring the CSA MC to Support the IPS Interface
Note For more detailed information about host posture events and quarantined IP address events, refer to
Using Management Center for Cisco Security Agents 5.1.
You must configure the CSA MC to send host posture events and quarantined IP address events to the
sensor. To configure the CSA MC to support IPS interfaces, follow these steps:
Step 1 Choose Events > Status Summary.
Step 2 In the Network Status section, click No beside Host history collection enabled, and then click Enable
in the popup window.
Note Host history collection is enabled globally for the system. This feature is disabled by default
because the MC log file tends to fill quickly when it is turned on.
Step 3 Choose Systems > Groups to create a new group (with no hosts) to use in conjunction with
administrator account you will next create.
Step 4 Choose Maintenance > Administrators > Account Management to create a new CSA MC
administrator account to provide IPS access to the MC system.
Step 5 Create a new administrator account with the role of Monitor. This maintains the security of the MC by
not allowing this new account to have configure privileges.
Note Remember the username and password for this administrator account because you need them to
configure external product interfaces on the sensor.
Step 6 Choose Maintenance > Administrators > Access Control to further limit this administrator account.
Step 7 In the Access Control window, select the administrator you created and select the group you created.
Note When you save this configuration, you further limit the MC access of this new administrator
account with the purpose of maintaining security on the CSA MC.
Adding External Product Interfaces and Posture ACLs
Caution In the Cisco IPS, the only external product interfaces you can add are CSA MC interfaces. The Cisco
IPS supports two CSA MC interfaces.