Appendix A. Resources

[ LiB ]

Nobody knows it all; everyone has to go back to other sources sometime, if for no other reason than to make sure that we remember something correctly. Here is a set of resources that we have found useful:

For an introduction to the Cisco Intrusion Detection System (IDS), read http://www.cisco.com/univercd/cc/td/doc/product/iaabu/csids/csids5/csidscog/overview.pdf.

Cisco IDS is discussed further at http://www.cisco.com/en/US/products/sw/secursw/ps2113/index.html.

Cisco IDS Sensor software is the subject of the Web page http://www.cisco.com/en/US/products/sw/secursw/ps5052/index.html.

To read release notes for the Cisco IDS version 4.0, visit http://www.cisco.com/univercd/cc/td/doc/product/iaabu/csids/csids9/15284_02.pdf.

To learn more about configuring Switched Port Analyzer (SPAN) and Remote SPAN (RSPAN) for Cisco Catalyst 2950 series switches, visit http://www.cisco.com/en/US/products/hw/switches/ps628/products_configuration_guide_chapter09186a00801a6ba9.html.

Configuring SPAN and RSPAN for Cisco Catalyst 3550 series switches is covered at http://www.cisco.com/en/US/products/hw/switches/ps646/products_configuration_guide_chapter09186a008011594e.html.

When configuring SPAN and RSPAN for Cisco Catalyst 4000 series switches, read the page http://www.cisco.com/en/US/products/hw/switches/ps663/products_configuration_guide_chapter09186a008012236b.html.

When configuring SPAN and RSPAN for Cisco Catalyst 4500 series switches, read http://www.cisco.com/en/US/products/hw/switches/ps4324/products_configuration_guide_chapter09186a00801a15f7.html.

For more information about configuring SPAN and RSPAN for Cisco Catalyst 6000 series switches, visit the Web page http://www.cisco.com/en/US/products/hw/switches/ps700/products_configuration_guide_chapter09186a008007fa3a.html.

For more about configuring SPAN and RSPAN for Cisco Catalyst 6500 series switches, visit http://www.cisco.com/en/US/products/hw/switches/ps708/products_configuration_guide_chapter09186a008007f323.html.

You can find the Cisco IDS Appliance and Module Installation and Configuration Guide online at http://www.cisco.com/application/pdf/en/us/guest/products/ps2113/c1679/ccmigration_09186a00801a229b.pdf.

For a list of commands for the Cisco IDS, check out http://www.cisco.com/en/US/products/sw/secursw/ps2113/products_command_reference_chapter09186a008019d6d0.html.

The Cisco IDS Command Reference is online at http://www.cisco.com/application/pdf/en/us/guest/products/ps2113/c1051/ccmigration_09186a008019d6c1.pdf.

"The Science of IDS Attack Identification" is an article at http://www.cisco.com/en/US/products/sw/secursw/ps2113/products_white_paper09186a0080092334.shtml.

You can find the Cisco IDS Signature Appendix online at http://www.cisco.com/en/US/products/sw/secursw/ps2113/products_installation_and_configuration_guide_chapter09186a008014a214.html.

When tuning sensing configuration, consult the Web page http://www.cisco.com/en/US/products/sw/cscowork/ps3990/products_user_guide_chapter09186a0080157f9f.html.

For details about installing and using the Cisco IDS Device Manager (IDM) version 4.1, read http://www.cisco.com/univercd/cc/td/doc/product/iaabu/csids/csids10/idmiev/swchap1.pdf.

When installing and using the Cisco IDM and IDS Event Viewer (IEV) version 4.1, consult the page http://www.cisco.com/en/US/products/sw/secursw/ps2113/products_installation_and_configuration_guide_chapter09186a00801a0c5a.html.

Read more about the CiscoWorks Management Center and Security Monitor for VMS at http://www.cisco.com/en/US/products/sw/cscowork/ps3991/index.html.

The Cisco Secure IDS (CSIDS) v4.0 is a five-day, instructor-led training course provided by Cisco-certified trainers . More details appear at http://www.cisco.com/pcgi-bin/front.x/wwtraining/CELC/index.cgi?action=CourseDesc&COURSE_ID=3115.

[ LiB ]