Host Intrusion Detection System Release 3.0 Release Notes

Installation
Introduction
Chapter 2
14
Introduction
Release 3.0 of HP-UX HIDS is available from three sources.
• As a depot directory on the server Operating Environment media, beginning with
HP-UX 11i v2 and OEUR 2005 (HP-UX 11i v1). HP-UX HIDS is a selectable product
on the OE media, and you may install it at system install/update time, or at a later
time using these instructions.
• As a depot directory on an Application Release CD, beginning with 2005 (HP-UX
11i).
• As a depot file you download from the HP Software Depot web site (HP-UX 11i).
The HP-UX HIDS software product bundle, HPUX-HIDS, contains the IDS and IDS-KERN
products. The IDS-KERN product is used to reduce the likelihood of a system reboot for
future HIDS software updates. The IDS product comprises three subproducts. You may
choose to install the following subproducts:
Table 2-2 shows which software is required on the administration and agent systems as
well as on a dual or evaluation system where you would run administration and agent
software together. The “Installation Summary” on page 16 describes how to package the
software into software depots and install it on your administration and agent systems.
Table 2-1 Filesets of HIDS
Software Description
IDS.IDS-AGT-RUN The agent software. The agent runs on servers to
help protect them from intrusions.
IDS.IDS-ADM-RUN
and
IDS.IDS-ADM-SHLIB
The administration software and the shared
libraries for the administration software. The
HP-UX HIDS administration System Manager
manages and monitors the HP-UX HIDS agents.
IDS.IDS-ENG-A-MAN The manpages for HP-UX HIDS.
Table 2-2 Software to Install
Software
Evaluation or
Dual System
Agent System
Administration
System
IDS.IDS-AGT-RUN YES YES NO
IDS.IDS-ADM-RUN and
IDS.IDS-ADM-SHLIB
YES NO YES
IDS.IDS-ENG-A-MAN YES YES YES
HP-UX-required
kernel patches
YES YES NO
Java JRE 1.3.1 YES NO YES
Java-required patches YES NO YES