Filter
Top Products
17-15
Cisco Intrusion Prevention System CLI Sensor Configuration Guide for IPS 7.1
OL-19892-01
Chapter 17 Administrative Tasks for the Sensor
Configuring Health Status Information
100
90
80
70
60 * * *** * ****** ** * * * * * * ** ** * * * *** *
50 * * *** * ****** ** * * * * * * ** ** * * * *** *
40 * *** ********************* * * * * ** * * * * * *********** * * ***
30 ******###**#**######**##****#*#*# *********#*# #*##****##**# #*#*###
20 #####################################################################
10 #####################################################################
0....5....1....1....2....2....3....3....4....4....5....5....6....6....7.
0 5 0 5 0 5 0 5 0 5 0 5 0
Inspection Load Percentage (last 72 hours) *=maximum #=average
sensor#
Configuring Health Status Information
Configure the health statistics for the sensor in service health monitor submode. Use the show health
command to see the results. The health status categories are rated by red and green with red being
critical. The following options apply:
• application-failure-policy {enable | disable} {true | false} status {green | yellow | red}—Lets you
choose to have an application failure applied to the overall sensor health rating.
• bypass-policy {enable | disable} {true | false} status {green | yellow | red}—Lets you choose to
know if bypass mode is active and have that apply to the overall sensor health rating.
Note The ASA 5500-X IPS SSP and the ASA 5585-X IPS SSP do not support bypass mode. The
adaptive security appliance will either fail open, fail close, or fail over depending on the
configuration of the adaptive security appliance and the type of activity being done on the
IPS.
• enable-monitoring {true | false}—Lets you choose to monitor sensor health and security.
• event-retrieval-policy {enable | disable} {true | false} red-threshold yellow-threshold
seconds—Lets you set a threshold for when the last event was retrieved and have that apply to the
overall sensor health rating. The health status is degraded to red or yellow when that threshold is
met. The range for the threshold is 0 to 4294967295 seconds.