Host Intrusion Detection System Release 3.1 Release Notes

Installation

Introduction

Release 3.1 of HP-UX HIDS is available from the following sources.

• As a depot directory on the server Operating Environment media, beginning with HP-UX

11i v2 and OEUR 2005 (HP-UX 11i v1). HP-UX HIDS is a selectable product on the OE

media, and you may install it or at a later time using the instructions in this chapter.

• As a depot directory on an Application Release CD, beginning with 2005 (HP-UX 11i).

• As a depot ﬁle you download from the HP Software Depot Web site (HP-UX 11i).

The HP-UX HIDS software product bundle, HPUX-HIDS, contains the IDS and IDS-KRN

products. The IDS-KRN product is used to reduce the likelihood of a system reboot for future

HIDS software updates. The IDS product comprises four subproducts listed in Table 2-1.

Table 2-2 describes which software is required on the administration and agent systems and

on a dual or evaluation system running administration and agent software together. The

“Installation Summary” on page 23 describes how to package the software into software

depots and install it on your administration and agent systems.

Table 2-1 Filesets of HIDS

Software Description

IDS.IDS-AGT-RUN The agent software. The agent runs on

servers to help protect them from intrusions.

IDS.IDS-ADM-RUN

and

IDS.IDS-ADM-SHLIB

The administration software and the shared

libraries for the administration software. The

HP-UX HIDS System Manager manages and

monitors the HP-UX HIDS agents.

IDS.IDS-ENG-A-MAN The manpages for HP-UX HIDS.

Table 2-2 Software to Install

Software

Evaluation

or Dual

System

Agent

System

Administration

System

IDS.IDS-AGT-RUN YES YES NO