HP-UX 11i September 2002 Release Notes

HP-UX 11i Version 1.0 Operating Environment Applications
Selectable Applications
Chapter 6
132
Selectable Applications
The following applications are selectable and not automatically installed with the 11i
Operating Environments. Table 6-2 on page 87 lists which applications are available for
each Operating Environment.
• HP Intrusion Detection System/9000 (IDS/9000) (see page 132)
• HP-UX IPFilter (see page 133)
• Ignite-UX (IUX) (see page 134)
• Netscape Directory Server (J4258CA) (see page 139)
• Java Out-of-Box (JAVAOOB) (see page 138)
• Selectable Network Drivers (see page 140)
• WebQoS Peak on HP-UX Packaged Edition (J4274AA) (see page 141)
HP Intrusion Detection System/9000 (IDS/9000)
The HP Intrusion Detection System/9000 (IDS/9000) is a host-based intrusion detection
system for HP-UX 11.x.
updated for
June 2002
IDS/9000 has been updated to version 2.1 to incorporate defect fixes. Version 2.1 has no
new functionality. For a complete list of defect fixes, please consult the product-specific
release notes (see the following “Documentation” section).
IMPORTANT IDS/9000 runs in compatibility mode on IPF systems. Given the associated emulation
overhead, we anticipate significant performance degradation. Therefore, we recommend
that you do not run IDS/9000 agents on IPF production systems.
new for
December 2001
IDS/9000 version 2.0 (J5083AA) includes the following features:
• Integration with OpenView Operations (OVO, formerly known as VPO or ITO)
and the associated Smart Plug In (SPI): Enables customers to monitor IDS/9000
alerts from the OVO management console. For configuration and control of IDS/9000
agent, the IDS/9000 administrative GUI is launched from within the OVO console.
• New administrative GUI: More task oriented and easier to use. Reduces the
number of interactions for installing, configuring, monitoring and controlling
IDS/9000 agents.
• Web protection capability: Documentation and a template script on how to
customize IDS/9000 to provide near real-time protection against web server
defacement.
• Automatic restart of surveillance schedules after a reboot: Users no longer
need to manually activate the monitoring schedules after a system reboot.
• Multiple response script capability: The limit of having a single response script
has been removed and users can now have multiple response scripts invoked when
an alert is generated.
• Rewritten and enhanced user's manual: Task oriented documentation with new
sections on agent configuration, response programs, error messages, and
troubleshooting.