IDS and NMS

[Mayank-Bhatnagar <mayank () ncb ernet in>]

hi folks,

Well there is this issue that I would like to put to the group.
"Requirement of an interface of an IDS with an already installed Network Management System".

Let me state it like this, If we have a managed IDS product it might have its own management console and its own
configurations, server etc.

However an organisation which is running a NMS might wish to incorporate IDS, its features on the NMS itself and might
not wish to invest on another Management Console.

There are some products like HP-OPen View which incorporate IDS in their feature set.But this scenario is different
in the sens that one has build a NMS and also provided IDS functionality using SNMP. The other case is where an 
independent
 IDS solution (independent of SNMP), getting incorporated in a NMS.

How much is this a viable solution or whether such requirement could exist, and if yes, what could be implications of 
same?
As far as I know, top notch IDS products dont have any integration with NMS, Some do send traps (which could be a
minimal part of IDS ie sending alerts to IDS management console as well as NMS)

Hope I am clear enough.....

Waiting for some views......

thanks and regards,
Mayank




------------------------------------------------------------------------------------
P.N.: The views expressed in this mail are solely the personal opinion of the mailer



-------------------------------------------------------------------------------
INTRUSION PREVENTION: READY FOR PRIME TIME?

IntruShield now offers unprecedented Intrusion IntelligenceTM capabilities 
- including intrusion identification, relevancy, direction, impact and analysis 
- enabling a path to prevention.

Download the latest white paper "Intrusion Prevention: Myths, Challenges, and Requirements" at: 
http://www.securityfocus.com/IntruVert-focus-ids2
-------------------------------------------------------------------------------