Which two protocols enable Cisco Configuration Professional to pull IPS alerts from a Cisco
ISR router? (Choose two.)
A.
syslog
B.
SDEE
C.
FTP
D.
TFTP
E.
SSH
F.
HTTPS
Explanation:
http://www.cisco.com/en/US/prod/collateral/iosswrel/ps6537/ps6586/ps6634/prod_white_pa
per0900aecd805c4ea8.html
I think (and not only me – https://learningnetwork.cisco.com/thread/10795) that the answer are SDEE and syslog (https://www.cisco.com/c/en/us/products/collateral/security/ios-intrusion-prevention-system-ips/prod_white_paper0900aecd805c4ea8.html):
Step 4.3: Enable IPS SDEE event notification
ip ips notify sdee
router(config)#ip ips notify sdee
To use SDEE, the HTTP server must be enabled (via the ‘ip http server’ command). If the HTTP server is not enabled, the router cannot respond to the SDEE clients because it cannot see the requests. SDEE notification is disabled by default and must be explicitly enabled.
IOS IPS also supports the use syslog to send event notification. SDEE and syslog can be used independently or enabled at the same time to send IOS IPS event notification. Syslog notification is enabled by default. If logging console is enabled, you will see IPS syslog messages. To enable syslog if it is not enabled:
router(config)#ip ips notify log
1
0