HP-UX 11i June 2003 Release Notes

HP-UX 11i Version 1.0 Operating Environment Applications
Selectable Applications
Chapter 6
148
Selectable Applications
The following applications are selectable and not automatically installed with the 11i
Operating Environments. Table on page 95 lists which applications are available for
each Operating Environment.
• HP Intrusion Detection System/9000 (IDS/9000) (see page 148)
• HP-UX IPFilter (see page 149)
• Ignite-UX (IUX) (see page 150)
• Java Out-of-Box (JAVAOOB) (see page 154)
• Netscape Directory Server (J4258CA) (see page 156)
• Pay Per Use (see page 157)
• Selectable Network Drivers (see page 157)
HP Intrusion Detection System/9000 (IDS/9000)
The HP Intrusion Detection System/9000 (IDS/9000) is a host-based intrusion detection
system for HP-UX 11.x.
updated for June
2002
IDS/9000 has been updated to version 2.1 to incorporate defect fixes. Version 2.1 has no
new functionality. For a complete list of defect fixes, please consult the product-specific
release notes (see the following “Documentation” section).
IMPORTANT IDS/9000 runs in compatibility mode on Itanium -based systems. Given the associated
emulation overhead, we anticipate significant performance degradation. Therefore, we
recommend that you do not run IDS/9000 agents on Itanium
-based production
systems.
new for
December 2001
IDS/9000 version 2.0 (J5083AA) includes the following features:
• Integration with OpenView Operations (OVO, formerly known as VPO or ITO)
and the associated Smart Plug In (SPI): Enables customers to monitor IDS/9000
alerts from the OVO management console. For configuration and control of IDS/9000
agent, the IDS/9000 administrative GUI is launched from within the OVO console.
• New administrative GUI: More task oriented and easier to use. Reduces the
number of interactions for installing, configuring, monitoring and controlling
IDS/9000 agents.
• Web protection capability: Documentation and a template script on how to
customize IDS/9000 to provide near real-time protection against web server
defacement.
• Automatic restart of surveillance schedules after a reboot: Users no longer
need to manually activate the monitoring schedules after a system reboot.
• Multiple response script capability: The limit of having a single response script
has been removed and users can now have multiple response scripts invoked when
an alert is generated.