Monitoring Cisco IDS/IPS SSM Modules

[Eero Volotinen]

2012/6/5 Joseph Hardeman <jwhardeman at gmail.com>:
> Hi Everyone,
>
> I have been looking around and am hoping that someone can help me out.  I
> recently got a Cisco 5520 with a SSM-20 module (latest code and Signatures)
> that I need to start monitoring.  I have been looking but I have not found a
> script that will help me monitor this via SNMP.
>
> We are looking to use Nagios to capture any security breachs or attempts
> that are captured by the SSM module and its analysis engine.
>
> We do have this device sending Syslog data to the Nagios system, so if there
> is a way to parse or tail this log to watch for the events that would be
> helpful too.

Maybe OSSEC helps? www.ossec.net ?

--
Eero

------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null