A-36
Cisco Intrusion Prevention System Sensor CLI Configuration Guide for IPS 7.2
OL-29168-01
AppendixA System Architecture
Summary of Cisco IPS Applications
IDM The Java applet that provides an HTML IPS management interface.
IME The Java applet that provides an interface for viewing and archiving
events.
InterfaceApp Handles bypass and physical se ttings and defines paired interfaces.
Physical settings are speed, duplex, and administrative state.
Logger Writes all the log messages of the application to the log file and the
error messages of the application to the Event Store.
MainApp Reads the configuration and starts applications, handles starting and
stopping of applications and node reboots, handles software
upgrades.
NotificationApp Sends SNMP traps when triggered by alert , status, and error events.
NotificationApp uses the public domain SNMP agent. SNMP GETs
provide information about the general health of the sensor.
SDEE Server
3
Accepts requests for events from remote clients.
SensorApp Captures and analyzes traffic on the monitored network and generate s
intrusion and network access events. Responds to IP logging control
transactions that turn logging on and off and that send and delete IP
log files.
SwitchApp Part of the IPS 4500 series design that enables the InterfaceApp and
sensor initialization scripts to communicate with and control the
built-in switch. Any application that needs to get or set information
on the switch must communicate with the SwitchApp.
Web Server Waits for remote HTTP client requests and calls the appropriate
servlet application.
1. This is a web server servlet.
2. This is a remote control transaction proxy.
3. This is a web server servlet.
TableA-2 Summary of Applications (continued)
Application Description