[ossec-list] Re: Monitoring Cisco network devices using OSSEC HIDS

["McClinton, Rick" <rmcclinton@xxxxxxxxxxxxxxxx>]

Configure the switch to log to syslog on the Ossec server, Ossec reads
the syslog. You can check the Ossec wiki for info on that, or a REALLY
good document on configuring your cisco equipment can be downloaded from
http://nsa2.www.conxion.com/cisco/download.htm.



> -----Original Message-----
> From: ossec-list@xxxxxxxxxxxxxxxx [mailto:ossec-list@xxxxxxxxxxxxxxxx]
On
> Behalf Of FastZ
> Sent: Thursday, August 09, 2007 12:32 AM
> To: ossec-list
> Subject: [ossec-list] Monitoring Cisco network devices using OSSEC
HIDS
> Importance: Low
> 
> 
> I have installed OSSEC HIDS on a home server of mine that is connected
> to a Cisco switch.  I believe I read somewhere that the OSSEC HIDS can
> monitor switches and routers as well as the host system and it's
> "agents".  Is this true?  Or did I misread something?  If it is true,
> how do you configure OSSEC HIDS to monitor this equipment?
> 
> Thanks,
> FastZ