Index

Table Of Contents

B - C - D - E - F - H - I - K - L - M - N - O - P - R - S - T - U - V - X -

Index

A

accelerator cards

See XL cards

access control list

See ACL

accessories

four-post racks

installing appliances in racks 3-21

installing cable-managment arms 3-23

installing slide assemblies 3-18

rack-kit contents 3-18

routing cables 3-27

tools 3-17

IDS-4210

package contents 3-4

IDS-4235

package contents 3-5

IDS-4250

package contents 3-5

two-post racks

center-mount installations 3-32

flush-mount installations 3-34

marking racks 3-31

rack kit contents 3-30

tools 3-30

ACL

changes 1-3

firewalls 1-8

adding

allowed hosts 4-18

hosts to the SSH known hosts list 4-20

users 4-17

Administrator

privileges 4-5

B

backing up configuration files 4-24

BIOS

IDS-4235

upgrading 1-10

IDS-4250

upgrading 1-10

C

Catalyst Software

supervisor engine commands

supported 4-42

unsupported 4-43

CLI

usage guidelines 4-3

CLI tasks

adding

allowed hosts 4-18

hosts to the SSH known hosts list 4-20

appliance

starting 4-26

stopping 4-26

configuration files

backing up 4-24

restoring 4-24

configuring

alarm channel system variables 4-29

event filters 4-30

sensors to log IP traffic 4-35

virtual sensor system variables 4-32

displaying

events 4-25

tech support information 4-27

version 4-21

IDS modules

configuring SPAN 4-41

configuring VACLs 4-39

enabling full memory tests 4-38

using the mls command 4-40

verifying installation 4-36

logging in 4-15

manually setting the sensor clock 4-14

passwords

changing 4-16

signature engines

tuning 4-33

viewing 4-31

users

adding 4-17

removing 4-19

command line interface

See CLI

configuration files

backing up 4-24

restoring 4-24

configuring

alarm channel system variables 4-29

event filters 4-30

sensors to log IP traffic 4-35

creating

service account 4-13

Ctrl-n 4-4

Ctrl-p 4-4

D

default

as a keyword 4-5

password 4-16

username 4-16

displaying

events 4-25

tech support information 4-27

version 4-21

E

enabling full memory tests 4-38

event filters

configuring 4-30

F

firewalls

appliances

behind (figure) 1-6

in front of (figure) 1-5

network placement 1-5

with routers 1-7

H

hardware

four-post racks 3-17

keyboards 1-9

monitors 1-9

power supply 3-12

SCSI hard-disk drives 3-15

spare hard-disk drives 1-9

two-post racks 3-29

XL card 3-1

help

displaying for a command 4-4

hosts

adding allowed 4-18

I

IDS-4210

accessories

package contents 3-4

bezel

described 3-6

installing 3-6

removing 3-6

center mount brackets

installing 3-7

tools 3-6

front mount brackets

installing 3-8

tools 3-8

NIC

lighted during power off 1-20

IDS-4220-E

upgrading

described 1-11

to version 4.0 1-12

IDS-4230-FE

upgrading

described 1-11

to version 4.0 1-12

IDS-4235

accessories

described 3-10

package contents 3-5

bezel

described 3-11

installing 3-11

removing 3-11

installing

power supply 3-12

SCSI hard-disk drives 3-16

upgrading

BIOS 1-10

IDS-4250

accessories

described 3-10

package contents 3-5

bezel

described 3-11

installing 3-11

removing 3-11

installing

1000BaseSX 3-14

power supply 3-12

SCSI hard-disk drives 3-16

two hard-disk drives 3-15

XL cards 3-2

SCSI hard-disk drives

installing 3-16

removing 3-16

upgrading

BIOS 1-10

IDS appliances

ACL

changes 1-3

firewalls 1-8

described 1-1

firewalls

ACL 1-8

behind appliances (figure) 1-6

in front of appliances (figure) 1-5

placement 1-5

with routers 1-7

four-post racks

installing appliances in racks 3-21

installing cable-management arms 3-23

installing slide assemblies 3-18

rack kit contents 3-18

routing cables 3-27

tools 3-17

hardware

compatibility 1-9

dual serial communication cables 1-20

keyboards 1-9

monitors 1-9

spare hard-disk drives 1-9

terminal settings 1-20

XL card 3-1

installing

procedure 1-19

XL cards 3-1, 3-2

interfaces 1-2

models 1-1

network

placement of appliances 1-4

topologies 1-3

removing the cover 3-2

restrictions 1-10

routers 1-7

SPAN 1-2

syslog

messages 1-2

traffic 1-8

TCP reset 1-3

Telnet traffic 1-8

two-post racks

center-mount installations 3-32

flush-mount installations 3-34

marking racks 3-31

rack kit contents 3-30

tools 3-30

upgrading

IDS-4220-E 1-20

IDS-4230-FE 1-20

to version 4.0 1-12

XL cards

fiber ports 3-4

IDS Event Viewer

privileges requires for viewing 4-6

IDS modules

described 2-1

enabling full memory tests 4-38

front panel 2-3

hot swapping 2-5, 2-10

installing

procedure 2-8

required tools 2-5

verifying 4-36

models 2-1

PFC 2-6

removing 2-11

requirements 2-3

shutdown

button 2-4

command 2-4

described 2-11

slot assignments 2-6, 2-8

SPAN

configuring 4-41

described 2-1

specifications 2-3

status LED 2-4

supported supervisor engine commands 4-42

unsupported supervisor engine commands 4-43

using the mls command 4-40

VACLs

configuring 4-39

described 2-1

initializing

sensors 4-7

installing

1000BaseSX 3-14

IDS appliances 1-19

power supply 3-12

SCSI hard-disk drives 3-16

XL cards 3-1, 3-2

K

keyboards

compatibility 1-9

keywords

default 4-5

no 4-5

using 4-5

L

license files

Apache license A-1

BSD license A-3

expat license A-4

GNU Lesser license A-13

GNU license A-4

JDOM license A-11

STLport license A-23

logging in 4-15

M

modes

Alarm Channel Configuration 4-3

Configuration 4-2

Interface Command-Control Configuration 4-2

Interface Group Configuration 4-2

Interface Sensing Configuration 4-2

Privileged Exec 4-2

Service 4-2

Tune Alarm Channel 4-3

Tune Micro Engines 4-3

Virtual Sensor Configuration 4-3

monitors

compatibility 1-9

N

Network Interface Card

See NIC

network placement

IDS appliances 1-4

network topologies

IDS appliances 1-3

NIC

lighted during power off 1-20

O

Operator

privileges 4-6

output

clearing current line 4-5

displaying 4-5

P

passwords

changing 4-16

service account 4-8

PFC

described 2-6

Policy Feature Card

See PFC

prompts

default input 4-3

R

recall

help and tab completion 4-4

using 4-4

removing

SCSI hard-disk drives 3-16

users 4-19

restoring configuration files 4-24

routers

with firewalls 1-7

S

sensors

initializing 4-7

service account

creating 4-13

setting the clock 4-14

signature engines

tuning 4-33

viewing 4-31

slot assignments

IDS modules 2-6

supervisor engines 2-6

SPAN

IDS appliances 1-2

SSH known hosts list

adding hosts 4-20

starting the appliance 4-26

stopping the appliance 4-26

supervisor engine commands

supported 4-42

unsupported 4-43

Switched Port Analyzer

See SPAN

syntax

case sensitivity 4-5

using tab completion 4-4

T

tab completion

using 4-4

TCP reset 1-3

troubleshooting

displaying system information 4-27

tuning signature engines 4-33

U

unsupported supervisor engine commands 4-43

upgrading

IDS-4220-E 1-11

IDS-4230-FE 1-11

to version 4.0 1-12

usage guidelines

CLI 4-3

user roles

Administrator 4-5

Operator 4-5

Viewer 4-5

using the mls command 4-40

V

VACLs

described 2-1

IDS modules 4-39

verifying IDS module installation 4-36

Viewer

assigning role for IDS Event Viewer 4-6

privileges 4-6

viewing signature engines 4-31

virtualAlarm 4-3

virtualSensor 4-3

virtual sensor system variables 4-32

VLAN access control lists

See VACLs

X

XL cards

described 3-1

fiber ports 3-4

installing 3-2