Cisco Systems IPS 7.1 Home Security System User Manual


  Open as PDF
of 1042
 
C-24
Cisco Intrusion Prevention System CLI Sensor Configuration Guide for IPS 7.1
OL-19892-01
Appendix C Troubleshooting
Troubleshooting the Appliance
You can configure a maximum of two external product devices.
For More Information
For more information on working with OS maps and identifications, see Adding, Editing, Deleting,
and Moving Configured OS Maps, page 7-28 and Displaying and Clearing OS Identifications,
page 7-32.
For the procedure for adding trusted hosts, see Adding TLS Trusted Hosts, page 4-51.
External Product Interfaces Troubleshooting Tips
To troubleshoot external product interfaces, check the following:
Make sure the interface is active by checking the output from the show statistics
external-product-interface command in the CLI, or choose Monitoring > Sensor Monitoring >
Support Information > Statistics in the IDM and check the Interface state line in the response, or
choose Configuration > sensor_name > Sensor Monitoring > Support Information > Statistics
in the IME, and check the Interface state line in the response.
Make sure you have added the CSA MC IP address to the trusted hosts. If you forgot to add it, add
it, wait a few minutes and then check again.
Confirm subscription login information by opening and closing a subscription on the CSA MC using
the browser.
Check the Event Store for the CSA MC subscription errors.
For More Information
For the procedure for adding trusted hosts, see Adding TLS Trusted Hosts, page 4-51.
For the procedure for displaying events, see Displaying Events, page C-108.
Troubleshooting the Appliance
This section contains information to troubleshoot the appliance. It contains the following topics:
The Appliance and Jumbo Packet Frame Size, page C-25
Troubleshooting Loose Connections, page C-25
The Analysis Engine is Busy, page C-25
Connecting the IPS 4240 to a Cisco 7200 Series Router, page C-26
Communication Problems, page C-26
The SensorApp and Alerting, page C-31
Blocking, page C-38
Logging, page C-47
TCP Reset Not Occurring for a Signature, page C-52
Software Upgrades, page C-54