5-11
Cisco Intrusion Prevention System Sensor CLI Configuration Guide for IPS 7.2
OL-29168-01
Chapter 5 Configuring Virtual Sensors
Adding, Editing, and Deleting Virtual Sensors
Step 15
Verify the deleted virtual sensor. Only the default virtual sensor, vs0, is present.
sensor(config-ana)# show settings
global-parameters
-----------------------------------------------
ip-logging
-----------------------------------------------
max-open-iplog-files: 20 <defaulted>
-----------------------------------------------
-----------------------------------------------
virtual-sensor (min: 1, max: 255, current: 2)
-----------------------------------------------
<protected entry>
name: vs0 <defaulted>
-----------------------------------------------
description: default virtual sensor <defaulted>
signature-definition: sig0 <protected>
event-action-rules: rules0 <protected>
anomaly-detection
-----------------------------------------------
anomaly-detection-name: ad0 <protected>
operational-mode: detect <defaulted>
-----------------------------------------------
physical-interface (min: 0, max: 999999999, current: 0)
-----------------------------------------------
-----------------------------------------------
logical-interface (min: 0, max: 999999999, current: 0)
-----------------------------------------------
-----------------------------------------------
sensor(config-ana)#
Step 16
Exit analysis engine mode.
sensor(config-ana)# exit
sensor(config)#
Apply Changes:?[yes]:
Step 17
Press Enter to apply the changes or enter
no
to discard them.
For More Information
•
For more information on creating and configuring anomaly detection policies, see Working With
Anomaly Detection Policies, page 9-8.
•
For more information on creating and configuring event action rules policies, see Working With
Event Action Rules Policies, page 8-8.
•
For more information on creating and configuring signature definition policies, see Working With
Signature Definition Policies, page 7-2.
•
For the procedure for pairing inline interfaces, see Configuring Inline Interface Pairs, page 4-17.
Repeat Step 11 for all the inline interface pairs that you want to assign to this virtual sensor.
•
For the procedure for pairing and grouping inline VLANs, see Configuring Inline VLAN Pairs,
page 4-22 and Configuring VLAN Groups, page 4-28. Repeat Step 12 for all inline VLAN pairs or
VLAN groups that you want to assign to this virtual sensor.
•
For the procedure for enabling anomaly detection, see Enabling Anomaly Detection, page 9-8.