IDS/9000 host/client server

[John Henrikson]

Hello,
I'm trying to test out the IDS/9000 system by setting it up as both admin and client on the same box.. is the only way to do this to set it up as a loopback system as per the instructions on pg 41 of the manual? i'd rather be able to configure it so other systems can be connected as well ..
thanks alot!!

[Steven E. Protter · Accepted solution]

The IDS server can monitor intrusions on itself and other clients.

We're planning to set up and old D box as server and let it monitor intrusion on all other boxes.

The server piece uses a lot of resources and might not be a good idea to run on a production server.

SEP

[John Henrikson]

Yes I just figured I'd try it and see what happened.. I'm running it on a non-production box but it looks like it will be useful.. thanks for your reply!

[Pierre Pasturel]

No, you normally want to specify the hostname/IP address of the admin and agent when configuring your admin and agent.

The instructions on p. 41 are merely for "a nonnetworked system (no IP address) or for testing purposes."

SEP - I would be curious to know how the IDS admin is being resource intensive so that we can perhaps address this in a future release.

Pierre