Chapter 6
Configuring Network-based IDS and IPS Devices
c.
Click OK to return to main screen.
Step 6
MARS Side Configuration
Add Configuration Information for Symantec ManHunt 3.x
Click Admin > System Setup > Security and Monitor Devices > Add
Step 1
From the Device Type list, select Add SW Security apps on a new host or Add SW security apps on
Step 2
existing host
Enter the Device Name and IP addresses if adding a new host.
Step 3
Click Apply
Step 4
Click Reporting Applications tab
Step 5
From the Select Application list, select Symantec ManHunt 3.x
Step 6
Step 7
Click Add
For attack path calculation and mitigation, specify the networks being monitored by the sensor. Do one
Step 8
of the following:
To manually define the networks, select the Define a Network radio button.
a.
b.
c.
d.
To select the networks that are attached to the device, click the Select a Network radio button.
a.
b.
c.
To save your changes, click Submit.
Step 9
To enable MARS to start sessionizing events from this module, click Activate.
Step 10
NetScreen IDP 2.1
IDP-side Configuration
Click NetScreen-Global Pro > IDP Manager > IDP.
Step 1
Log in to the IDP Manager.
Step 2
78-17020-01
Delay between SNMP notification (mins): (Example: 1 min)
Enter the network address in the Network IP field.
Enter the corresponding network mask value in the Mask field.
Click Add to move the specified network into the Monitored Networks field.
Repeat as needed.
Select a network from in the Select a Network list.
Click Add to move the selected network into the Monitored Networks field.
Repeat as needed.
User Guide for Cisco Security MARS Local Controller
NetScreen IDP 2.1
6-31