The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.
Numerics
4GE bypass interface card
configuration restrictions 5-4
described 5-4
illustration 5-4
A
accelerator cards
access control list
accessing
IPS software 11-2
accessories
four-post racks
installing appliances in racks 4-21
installing cable-management arms 4-22
installing slide assemblies 4-19
rack-kit contents 4-19
routing cables 4-26
tools 4-19
IDS-4210
package contents 2-7
IDS-4235/4250
package contents 4-11
two-post racks
center-mount installations 4-29
flush-mount installations 4-30
marking racks 4-29
rack kit contents 4-28
tools 4-28
actions
IP logs 1-3
multiple packet drop 1-3
TCP reset 1-2
AIP-SSM
described 1-15
indicators 7-2
installing 7-3
memory specifications 7-1
models 1-15
removing 7-5
requirements 7-2
show module 1 command 7-4
specifications 7-1
time sources 1-20
verifying status 7-4
appliances
ACLs 1-3
described 1-13
four-post racks
installing appliances in racks 4-21
installing cable-management arms 4-22
routing cables 4-26
hardware
dual serial communication cables 4-8
spare hard-disk drives 4-6
terminal settings 4-8
IDS-4210
indicators 2-2
IDS-4215
rack mounting 3-6
surface mounting 3-5
IDS-4235/4250
front panel 4-3
indicators 4-3
installing
XL cards (IDS-4235/4250) 4-14
XL cards (IDS-4250) 4-14
managers 1-13
models 1-13
restrictions 1-14
setting up a terminal server 1-14
SPAN 1-13
TCP reset 1-2
terminal server 1-14
time sources 1-19
two-post racks
marking racks 4-29
rack kit contents 4-28
tools 4-28
XL cards
fiber ports 4-16
ASA
described 1-15
attack responses
TCP resets
actions 1-2
B
back panel features
IDS-4210 2-3
IDS-4215 3-2
IDS-4235/4250 4-4
IPS-4240/4255 6-3
IPS-4260 5-6
BIOS
IDS-4235/4250
upgrading 4-7
C
cable pinouts
console port 1-28
RJ-45 1-28
RJ-45 to DB-25 1-29
RJ-45 to DB-9 1-29
Catalyst software
IDSM-2
enabling full memory tests 8-12
resetting 8-14
Cisco.com
accessing software 11-2
downloading software 11-1
IPS software 11-1
software downloads 11-1
Cisco IOS software
IDSM-2
enabling full memory tests 8-13
resetting 8-14
Cisco Security Intelligence Operations
described 11-14
URL 11-14
Cisco Services for IPS
service contract 11-9
supported products 11-9
clear events command 1-22
command and control interfaces
described 1-4
Ethernet 1-2
list 1-4
commands
clear events 1-22
copy license-key 11-12
show module 1 7-4
console port pinouts 1-28
copy license-key command 11-12
correcting time on the sensor 1-22
cryptographic account
Encryption Software Export Distribution Authorization from 11-2
obtaining 11-2
D
DC power supply
IPS-4240 6-9
downloading software 11-1
E
electrical safety guidelines 1-24
enabling
full memory tests
Catalyst software 8-12
Cisco IOS software 8-13
Encryption Software Export Distribution Authorization form
cryptographic account 11-2
described 11-2
ESD environment
working in 1-25
Ethernet port indicators
IPS-4260 5-7
Event Store
clearing events 1-22
F
fail-over
testing 5-4
front panel indicators
IDS-4210 2-2
IDS-4215 3-2
IDS-4235/4250 4-3
IPS-4240/4255 6-2
IPS-4260 5-6
front panel switches
IPS-4260 5-5
G
grounding lugs
IPS-4240/4255 6-6
IPS-4260 5-14
guidelines
electrical safety 1-24
power supplies 1-25
rack configuration 1-23
sites 1-23
H
hardware
four-post racks 4-18
power supply (IDS-4235/4250) 4-12
SCSI hard-disk drives 4-16
spare hard-disk drives 4-6
two-post racks 4-28
hardware bypass
configuration restrictions 5-4
IPS-4260 5-4
with software bypass 5-4
I
IDS-4210
accessories package contents 2-7
back panel features 2-3
bezel
described 2-7
installing 2-7
removing 2-7
center mount brackets
installing 2-8
tools 2-8
front mount brackets
installing 2-10
tools 2-10
front panel
illustration 2-2
indicators 2-2
installing 2-5
IDS-4215
4FE card
installing 3-22
removing 3-20
accessories 3-4
back panel
illustration 3-2
indicators 3-3
back panel features 3-2
BIOS upgrade 3-9
chassis cover
removing 3-11
replacing 3-13
compact flash device
removing 3-17
replacing 3-18
front panel
illustration 3-2
indicators 3-2
hard-disk drive
removing 3-15
replacing 3-16
installing 3-7
rack mounting 3-6
ROMMON upgrade 3-9
specifications 3-3
surface mounting 3-5
upgrading
BIOS 3-9
ROMMON 3-9
IDS-4235
back panel (illustration) 4-4
described 4-1
front panel (illustration) 4-3
upgrading BIOS 4-7
IDS-4235/4250
accessories kit 4-11
back panel features 4-4
bezel
described 4-12
installing 4-12
removing 4-12
front panel indicators 4-3
installing 4-8
installing power supply 4-12
rack mounting (2-post) 4-28
rack mounting (4-post) 4-18
SCSI hard-disk drives
installing 4-18
specifications 4-6
IDS-4250
back panel (illustration) 4-4
front panel
illustration 4-3
indicators 4-3
installing 4-8
SCSI hard-disk drives 4-18
SX card 4-14
two hard-disk drives 4-16
XL cards 4-14
SCSI hard-disk drives
removing 4-17
upgrading BIOS 4-7
IDS-4250-XL
TCP reset interface 4-8
IDS appliances
four-post racks
installing slide assemblies 4-19
rack kit contents 4-19
tools 4-19
hardware
dual serial communication cables 2-5
terminal settings 2-5
two-post racks
center-mount installations 4-29
flush-mount installations 4-30
unsupported models 1-12
IDSM-2
described 1-16
enabling full memory tests
Catalyst software 8-12
Cisco IOS software 8-13
front panel 8-3
installing
procedure 8-5
required tools 8-4
verifying 8-8
PFC 8-5
powering down(Catalyst OS) 8-15
powering down (Cisco IOS) 8-16
powering up (Catalyst OS) 8-15
powering up (Cisco IOS) 8-16
removing 8-10
requirements 8-2
resetting
Catalyst software 8-14
Cisco IOS software 8-14
shutdown
button 8-3
command 8-3
described 8-10
slot assignments 8-5
SPAN 1-16
specifications 8-1
status indicator 8-3
supported configurations 8-2
TCP reset port 8-3
time sources 1-19
VACLs 1-16
verifying installation 8-8
IDS switch modules
unsupported models 1-12
indicators
IDS-4210 2-2
initialization
verifying 10-8
initializing the sensor 10-1, 10-2
inline mode
described 1-10
inline VLAN pair mode
described 1-10
supported sensors 1-10
installation preparation 1-22
installer major version described 11-6
installer minor version described 11-6
installing
AIP-SSM 7-3
IDS-4210 2-5
IDS-4215 3-7
IDS-4235 4-8
IPS-4240 6-7
IPS-4260 5-14
license key 11-13
NM-CIDS 9-6
power supply (IDS-4235/4250) 4-12
SCSI hard-disk drives (IDS-4235/4250) 4-18
sensor license 11-11
SX cards (IDS-4250) 4-14
XL cards (IDS04235/4250) 4-14
XL cards (IDS-4235/4250) 4-14
interfaces
command and control 1-4
configuration restrictions 1-8
described 1-3
port numbers 1-3
sensing 1-4
slot numbers 1-3
TCP reset 1-7
interface support (table) 1-5
IPS-4240
accessories 6-5
back panel
illustration 6-3
indicators 6-3
described 6-1
features 6-2
front panel
illustration 6-2
indicators 6-2
installing DC power supply 6-9
rack mounting 6-5
IPS-4240/4255
back panel features 6-3
front panel indicators 6-2
installing 6-7
specifications 6-4
IPS-4255
accessories 6-5
back panel (illustration) 6-3
front panel
illustration 6-2
indicators 6-2
installing 6-7
rack mounting 6-5
IPS-4260
4GE bypass interface card 5-2
accessories kit 5-9
back panel features 5-6
chassis cover
removing 5-18
described 5-1
Ethernet port indicators 5-7
features 5-5
front panel indicators 5-6
front panel switches 5-5
grounding lugs 5-14
hardware bypass 5-4
installing 5-14
network ports 5-2
performance 5-2
power supplies 5-2
power supply indicators 5-7
rack mounting (2-post) 5-12
rack mounting (4-post) 5-9
sensing interfaces 5-2
specifications 5-8
supported PCI cards 5-2
IPS-4260 chassis cover
replacing 5-18
IPS modules
time synchronization 1-21
IPS software
available files 11-1
obtaining 11-1
platform-dependent release examples 11-7
IPS software file names
major updates (illustration) 11-3
minor updates (illustration) 11-3
patch releases (illustration) 11-3
service packs (illustration) 11-3
L
license key
installing 11-13
Licensing panel
configuring 11-11
logging in
terminal servers 1-14
M
major updates described 11-4
minor updates described 11-4
modes
IDS 1-1
inline 1-10
IPS 1-1
modules
AIP-SSM
described 1-15
memory specifications 7-1
specifications 7-1
IDSM-2 1-16, 8-2, 8-3, 8-4, 8-5, 8-10
NM-CIDS 1-17, 9-1, 9-4, 9-5, 9-6, 9-8, 9-9, 9-10, 9-11
N
Network Timing Protocol
NM-CIDS
blank panels 9-11
described 1-17
front panel 9-4
hardware architecture 9-3
installing
OIR support 9-8
required tools 9-6
interfaces 9-5
OIR support 9-5
removing
OIR support 9-10
requirements
hardware 9-3
platforms 9-2
specifications 9-1
status indicators 9-5
NTP
described 1-19
incorrect configuration 1-21
time synchronization 1-19
understanding 1-19
O
obtaining
cryptographic account 11-2
IPS sofware 11-1
P
passwords
service account 10-2
patch releases described 11-4
PFC
described 8-5
Policy Feature Card
powering down
powering up
power supplies
guidelines 1-25
power supply indicators
IPS-4260 5-7
preparing
for sensor installation 1-22
promiscuous mode
described 1-9
packet flow 1-9
R
rack configuration guidelines 1-23
rack mounting (2-post)
IDS-4235/4250 4-28
IPS-4260 5-12
rack mounting (4-post)
IDS-4235/4260 4-18
IPS-4260 5-9
racks
configuration guidelines 1-23
removing
AIP-SSM 7-5
IPS-4260
chassis cover 5-18
NM-CIDS 9-9
SCSI hard-disk drives (IDS-4235/4250) 4-17
replacing
IPS-4260 chassis cover 5-18
requirements
AIP-SSM 7-2
resetting
IDSM-2 8-13
RJ-45 cable pinouts 1-28
RJ-45 to DB2-5 cable pinouts 1-29
RJ-45 to DB-9 cable pinouts 1-29
S
security
information on Cisco Security Intelligence Operations 11-14
sensing interfaces
described 1-4
modes 1-4
PCI cards 1-4
sensors
AIP-SSM 1-15
capturing traffic 1-1
comprehensive deployment 1-1
Comprehensive Deployment Solutions (illustration) 1-1
electrical guidelines 1-24
IDS mode 1-1
incorrect NTP configuration 1-21
interface support 1-5
IPS mode 1-1
license 11-11
models 1-11
network topology 1-11
NTP time synchronization 1-19
power supply guidelines 1-25
preparing for installation 1-22
rack configuration guidelines 1-23
recovering the system image 11-8
reimaging 11-8
site guidelines 1-23
supported 1-11
TCP reset 1-2
time sources 1-19
unsupported 1-12
service packs described 11-4
setting up a terminal server 1-14
show module 1 command 7-4
signature/virus update files described 11-5
signature engine update files described 11-5
site guidelines 1-23
slot assignments
IDSM-2 8-5
supervisor engines 8-5
software bypass
with hardware bypass 5-4
software downloads Cisco.com 11-1
software file names
recovery (illustration) 11-6
signature/virus updates (illustration) 11-5
signature engine updates (illustration) 11-5
system image (illustration) 11-6
SPAN
appliances 1-13
IDSM-2 1-16
specifications
AIP-SSM 7-1
IDS-4215 3-3
IDS-4235/4250 4-6
IDSM-2 8-1
IPS-4240/4255 6-4
IPS-4260 5-8
NM-CIDS 9-1
status AIP-SSM 7-4
Switched Port Analyzer See SPAN
System Configuration Dialog 10-1
T
TCP reset 1-2
TCP reset interfaces
conditions 1-8
described 1-7
list 1-7
TCP reset port
IDSM-2 8-3
terminal servers
setting up 1-14
testing fail-over 5-4
TFTP servers
recommended 3-9
UNIX 3-9
Windows 3-9
time correcting on the sensor 1-22
time sources
AIP-SSM 1-20
appliances 1-19
IDSM-2 1-19
NM-CIDS 1-20
time synchronization
IPS modules 1-21
troubleshooting TCP reset interfaces 4-8
U
understanding
time on the sensor 1-19
unsupported sensors 1-12
upgrading
4.1 to 5.0 11-7
minimum required version 11-7
URLs for Cisco Security Intelligence Operations 11-14
using TCP reset interfaces 1-8
V
VACL
VACLs
IDSM-2 1-16
verifying
IDSM-2 installation 8-8
sensor initialization 10-8
sensor setup 10-8
X
XL cards
fiber ports 4-16