Cisco Systems IPS4510K9 Home Security System User Manual


 
3-17
Cisco Intrusion Prevention System Sensor CLI Configuration Guide for IPS 7.2
OL-29168-01
Chapter 3 Setting Up the Sensor
Changing Web Server Settings
If you disable TLS, you receive this message:
Warning: TLS protocol support has been disabled. This change will not take effect until
the web server is re-started.
Step 5
Change the HTTP server header.
sensor(config-web)# server-id Nothing to see here. Move along.
Step 6
Specify the web session inactivity timeout.
sensor(config-web)# websession-inactivity-timeout 800
Step 7
Turn on logging for web session inactivity timeouts.
sensor(config-web)# enable-websession-inactivity-timeout-logging true
Step 8
Turn on TLS client ciphers restriction.
sensor(config-web)# tls-client-ciphers-restriction enable
Step 9
Verify the web server changes.
sensor(config-web)# show settings
enable-tls: true default: true
port: 8080 default: 443
server-id: Nothing to see here. Move along. default: HTTP/1.1 compliant
configurable-service (min: 0, max: 99, current: 0)
-----------------------------------------------
-----------------------------------------------
websession-inactivity-timeout: 800 default: 3600
enable-websession-inactivity-timeout-logging: true default: false
tls-client-ciphers-restriction: enable default: enable
sensor(config-web)#
Step 10
To revert to the defaults, use the default form of the commands.
sensor(config-web)# default port
sensor(config-web)# default enable-tls
sensor(config-web)# default server-id
Step 11
Verify the defaults have been replaced.
sensor(config-web)# show settings
enable-tls: true <defaulted>
port: 443 <defaulted>
server-id: HTTP/1.1 compliant <defaulted>
configurable-service (min: 0, max: 99, current: 0)
-----------------------------------------------
-----------------------------------------------
websession-inactivity-timeout: 3600 <defaulted>
enable-websession-inactivity-timeout-logging: false <defaulted>
tls-client-ciphers-restriction: enable <defaulted>
sensor(config-web)#
Step 12
Exit web server submode.
sensor(config-web)# exit
Apply Changes:?[yes]:
Step 13
Press Enter to apply the changes or enter
no
to discard them.