- Preface
- Introducing the CLI Configuration Guide
- Logging In to the Sensor
- Initializing the Sensor
- Setting Up the Sensor
- Configuring Interfaces
- Configuring the Virtual Sensor
- Configuring Event Action Rules
- Defining Signatures
- Configuring Anomaly Detection
- Configuring Global Correlation
- Configuring External Product Interfaces
- Configuring IP Logging
- Configuring and Capturing Live Traffic on an Interface
- Configuring Attack Response Controller for Blocking and Rate Limiting
- Configuring SNMP
- Working With Configuration Files
- Administrative Tasks for the Sensor
- Configuring the ASA 5500 AIP SSM
- Configuring the ASA 5500-X IPS SSP
- Configuring the ASA 5585-X IPS SSP
- Understanding Cisco IPS Software
- Upgrading, Downgrading, and Installing System Images
- System Architecture
- Signature Engines
- Troubleshooting
- CLI Error Messages
- Open Source License Files
- Glossary
- Index
Cisco Intrusion Prevention System Sensor CLI Configuration Guide for IPS 7.1
- Updated:
- October 22, 2014
Chapter: Preface
Preface
Published: March 31, 2011 , OL-19892-01
Contents
This document describes how to configure the sensor using the Cisco IPS 7.1 CLI. It contains the following sections:
Audience
This guide is intended for administrators who need to do the following:
Organization
This guide includes the following sections:
|
|
|
|
|---|---|---|
Describes how to use the setup command to initialize sensors. |
||
Describes how to use the CLI to configure initial settings on the sensor. |
||
Describes how to configure promiscuous, inline, inline VLAN pair, and VLAN group interfaces. |
||
Describes how to configure event action rules policies on the sensor. |
||
Describes how to configure anomaly detection policies on the sensor. |
||
Describes how to configure global correlation features on the sensor. |
||
Describes how to configure external product interfaces for CSA MC. |
||
Describes how to display and capture live traffic on sensor interfaces. |
||
“Configuring Attack Response Controller for Blocking and Rate Limiting” |
Describes how to configure blocking and rate limiting on Cisco routers, and switches, and how to configure a master blocking sensor. |
|
Describes various administrative procedures to help you keep your sensor working and up to date. |
||
Describes where to go to get the latest IPS software and describes the naming conventions. |
||
Describes how to upgrade sensors and reimage the various sensors. |
||
Contains troubleshooting tips for IPS hardware and software. |
||
Conventions
This document uses the following conventions:
Means reader take note.
Tip Means the following information will help you solve a problem.
Timesaver Means the described action saves time. You can save time by performing the action described in the paragraph.
Warning Means reader be warned. In this situation, you might perform an action that could result in bodily injury.
Related Documentation
For more information on Cisco IPS, refer to the following documentation found at this URL:
http://www.cisco.com/en/US/products/hw/vpndevc/ps4077/tsd_products_support_series_home.html
- Documentation Roadmap for Cisco Intrusion Prevention System
- Release Notes for Cisco Intrusion Prevention System
- Cisco Intrusion Prevention System Device Manager Configuration Guide
- Cisco Intrusion Prevention System Manager Express Configuration Guide
- Cisco Intrusion Prevention System Command Reference
- Cisco Intrusion Prevention System Appliance and Module Installation Guide
- Installling and Removing Interface Cards in Cisco IPS-4260 and IPS 4270-20
- Regulatory Compliance and Safety Information for the Cisco Intrusion Prevention System 4300 Series Appliance Sensor
- Regulatory Compliance and Safety Information for the Cisco ASA 5500-X Series Appliances and the Cisco Intrusion Prevention System 4300 Series Appliances
- Regulatory Compliance and Safety Information for the Cisco Intrusion Prevention System 4500 Series Sensor Appliance
Obtaining Documentation, Using the Cisco Bug Search Tool, and Submitting a Service Request
For information on obtaining documentation, using the Cisco Bug Search Tool (BST), submitting a service request, and gathering additional information, see What’s New in Cisco Product Documentation at: http://www.cisco.com/en/US/docs/general/whatsnew/whatsnew.html .
Subscribe to What’s New in Cisco Product Documentation , which lists all new and revised Cisco technical documentation, as an RSS feed and deliver content directly to your desktop using a reader application. The RSS feeds are a free service.
Feedback