Filter
Top Products
7-16
Cisco Intrusion Prevention System CLI Sensor Configuration Guide for IPS 7.1
OL-19892-01
Chapter 7 Configuring Event Action Rules
Configuring Target Value Ratings
The following options apply:
• target-value—Specifies the IPv4 target value rating:
–
zerovalue—No value of this target.
–
low—Lower value of this target.
–
medium—Normal value of this target (default).
–
high—Elevated value of this target.
–
mission-critical—Extreme value of this target.
• no target-value—Removes the IPv4 target value rating.
• target-address ip_address—Specifies the range set of IP address(es) for IPv4 addresses in the
following form: <A.B.C.D>-<A.B.C.D>[,<A.B.C.D>-<A.B.C.D>]
• ipv6-target-value—Specifies the IPv6 target value rating:
–
zerovalue—No value of this target.
–
low—Lower value of this target.
–
medium—Normal value of this target (default).
–
high—Elevated value of this target.
–
mission-critical—Extreme value of this target.
• no ipv6-target-value—Removes the IPv6 target value rating.
• ipv6-target-address ip_address—Specifies the range set of IP address(es) for IPv6 addresses in the
following form:
<XXXX:XXXX:XXXX:XXXX:XXXX:XXXX:XXXX:XXXX>-<XXXX:XXXX:XXXX:XXXX:
XXXX:XXXX:XXXX:XXXX>[,<XXXX:XXXX:XXXX:XXXX:XXXX:XXXX:XXXX:XXXX>-
<XXXX:XXXX:XXXX:XXXX:XXXX:XXXX:XXXX:XXXX>]
Adding, Editing, and Deleting Target Value Ratings
To add, edit, and delete target value ratings for your network assets, follow these steps:
Step 1 Log in to the CLI using an account with administrator privileges.
Step 2 Enter event action rules submode.
sensor# configure terminal
sensor(config)# service event-action-rules rules1
Step 3 Assign an IPv4 target value rating to the network asset.
sensor(config-eve)# target-value mission-critical target-address 192.0.2.0
Step 4 Assign an IPv6 target value rating to the network asset.
sensor(config-eve)# ipv6-target-value mission-critical ipv6-target-address
2001:0db8:3c4d:0015:0000:0000:abcd:ef12
Step 5 Verify that you added the target value rating.
sensor(config-eve)# show settings
-----------------------------------------------
target-value (min: 0, max: 5, current: 1)
-----------------------------------------------
target-value-setting: mission-critical
target-address: 192.0.2.0 default: 0.0.0.0-255.255.255.255
-----------------------------------------------