HIDS - OSSEC Software and Support

Last Updated: 10/19/2012

Overview

OSSEC is OIT’s recommendation for Macintosh servers that contain private data. Windows, Unix/Linux servers need to use Tripwire Enterprise.

Acquiring OSSEC software and licenses

To get OSSEC for the first time, follow the steps below:

  1. Go to www.ossec.net
  2. Click on the Downloads tab
  3. Download the software titled “Unix/Linux Version”, which will work for Macintosh servers.
  4. Install OSSEC on each Macintosh Internet facing server you administer.

OSSEC self-help

  • OSSEC manuals on reserve in Norlin Library
    • OIT has placed the vendor’s OSSEC manuals on reserve in Norlin Library. You can check out the manuals at the reference desk under course number HIDS 1000.
  • OSSEC training presentation in PDF format.

OSSEC Support from OIT

OIT will only provide OSSEC escalated support to administrators who have taken the OSSEC training. To get help call the IT Service Center at 303-735-4357 (5-HELP from an on-campus phone).