Cisco Systems IPS 7.1 Home Security System User Manual


  Open as PDF
of 1042
 
CHAPTER
3-1
Cisco Intrusion Prevention System CLI Sensor Configuration Guide for IPS 7.1
OL-19892-01
3
Initializing the Sensor
This chapter describes how to use the setup command to initialize the sensor, and contains the following
sections:
Initializing Notes and Caveats, page 3-1
Understanding Initialization, page 3-2
Participating in the SensorBase Network, page 3-2
Simplified Setup Mode, page 3-3
System Configuration Dialog, page 3-3
Basic Sensor Setup, page 3-5
Advanced Setup, page 3-8
Advanced Setup, page 3-8
Verifying Initialization, page 3-25
Initializing Notes and Caveats
The following notes and caveats apply to initializing the sensor:
You must be administrator to use the setup command.
You must have a valid sensor license for global correlation features to function. You can still
configure and display statistics for the global correlation features, but the global correlation
databases are cleared and no updates are attempted. Once you install a valid license, the global
correlation features are reactivated.
The currently supported Cisco IPS appliances are the IPS 4240, IPS 4255, and IPS 4260 [IPS 7.1(5)
and later], IPS 4270-20 [IPS 7.1(3) and later], IPS 4345 and IPS 4360 [IPS 7.1(3) and later], and
IPS 4510 and IPS 4520 [IPS 7.1(4) and later].
You do not need to configure interfaces on the ASA IPS modules (ASA 5500 AIP SSM,
ASA 5500-X IPS SSP, and ASA 5585-X IPS SSP). You should ignore the modify interface default
VLAN setting in setup. The separation of traffic across virtual sensors is configured differently for
the ASA IPS modules than for other sensors.