Cisco Systems IPS 7.1 Home Security System User Manual


  Open as PDF
of 1042
 
17-18
Cisco Intrusion Prevention System CLI Sensor Configuration Guide for IPS 7.1
OL-19892-01
Chapter 17 Administrative Tasks for the Sensor
Configuring Health Status Information
Configuring Health Statistics
To configure the health statistics for the sensor, follow these steps:
Step 1 Log in to the CLI using an account with administrator privileges.
Step 2 Enter service health monitor submode.
sensor# configure terminal
sensor(config)# service health-monitor
sensor(config-hea)#
Step 3 Enable the metrics for application failure status.
sensor(config-hea)# application-failure-policy
sensor(config-hea-app)# enable true
sensor(config-hea-app)# status red
sensor(config-hea-app)# exit
sensor(config-hea)#
Step 4 Enable the metrics for bypass policy.
sensor(config-hea)# bypass-policy
sensor(config-hea-byp)# enable true
sensor(config-hea-byp)# status yellow
sensor(config-hea-byp)# exit
sensor(config-hea)#
Step 5 Enable the metrics for sensor health and security monitoring.
sensor(config-hea)# enable-monitoring true
sensor(config-hea)#
Step 6 Set the event retrieval thresholds for event retrieval metrics.
sensor(config-hea)# event-retrieval-policy
sensor(config-hea-eve)# enable true
sensor(config-hea-eve)# red-threshold 100000
sensor(config-hea-eve)# yellow-threshold 100
sensor(config-hea-eve)# exit
sensor(config-hea)#
Step 7 Enable health metrics for global correlation.
sensor(config-hea)# global-correlation-policy
sensor(config-hea-glo)# enable true
sensor(config-hea-glo)# exit
sensor(config-hea)#
Step 8 Enable the metrics for heartbeat events to be emitted at the specified interval of seconds.
sensor(config-hea)# heartbeat-events enable 20000
sensor(config-hea)#
Step 9 Set the inspection load threshold.
sensor(config-hea)# inspection-load-policy
sensor(config-hea-ins)# enable true
sensor(config-hea-ins)# red-threshold 100
sensor(config-hea-ins)# yellow-threshold 50
sensor(config-hea-ins)# exit
sensor(config-hea)#
Step 10 Enable the interface down policy.
sensor(config-hea)# interface-down-policy