Cisco Systems IPS 7.1 Home Security System User Manual


  Open as PDF
of 1042
 
17-28
Cisco Intrusion Prevention System CLI Sensor Configuration Guide for IPS 7.1
OL-19892-01
Chapter 17 Administrative Tasks for the Sensor
Clearing the Denied Attackers List
Step 3 Display the system clock with details. The following example indicates that the sensor is getting its time
from NTP and that is configured and synchronized.
sensor# show clock detail
20:09:43 UTC Thu Apr 03 2011
Time source is NTP
Summer time starts 03:00:00 UTC Sun Mar 09 2011
Summer time stops 01:00:00 UTC Sun Nov 02 2011
Step 4 Display the system clock with details. The following example indicates that no time source is configured.
sensor# show clock detail
*20:09:43 UTC Thu Apr 03 2011
No time source
Summer time starts 03:00:00 UTC Sun Mar 09 2011
Summer time stops 01:00:00 UTC Sun Nov 02 2011
Manually Setting the System Clock
Note You do not need to set the system clock if your sensor is synchronized by a valid outside timing
mechanism such as an NTP clock source.
Use the clock set hh:mm [:ss] month day year command to manually set the clock on the appliance. Use
this command if no other time sources are available. The clock set command does not apply to the
following platforms, because they get their time from the adaptive security appliance in which they are
installed:
ASA 5500 AIP SSM
ASA 5500-X IPS SSP
ASA 5585-X IPS SSP
To manually set the clock on the appliance, follow these steps:
Step 1 Log in to the CLI using an account with administrator privileges.
Step 2 Set the clock manually.
sensor# clock set 13:21 Mar 29 2011
Note The time format is 24-hour time.
Clearing the Denied Attackers List
Use the show statistics denied-attackers command to display the list of denied attackers. Use the clear
denied-attackers [virtual_sensor] [ip-address ip_address] command to delete the denied attackers list
and clear the virtual sensor statistics.