Cisco IPS 7.1 Instalační příručka stáhnout pdf (Strana 313)

E-43

Cisco Intrusion Prevention System Appliance Hardware Installation Guide for IPS 7.1

OL-24002-01

Appendix E Troubleshooting

Troubleshooting the Appliance

sensor(config)# service signature-definition sig0

sensor(config-sig)#

Step 3 Make sure the event action is set to block the host.

Note If you want to receive alerts, you must always add produce-alert any time you configure the

event actions.

sensor(config-sig)# signatures 1300 0

sensor(config-sig-sig)# engine normalizer

sensor(config-sig-sig-nor)# event-action produce-alert|request-block-host

sensor(config-sig-sig-nor)# show settings

normalizer

-----------------------------------------------

event-action: produce-alert|request-block-host default: produce-alert|deny

-connection-inline

edit-default-sigs-only

-----------------------------------------------

default-signatures-only

-----------------------------------------------

specify-service-ports

-----------------------------------------------

specify-tcp-max-mss

-----------------------------------------------

specify-tcp-min-mss

-----------------------------------------------

--MORE--

Step 4 Exit signature definition submode.

sensor(config-sig-sig-nor)# exit

sensor(config-sig-sig)# exit

sensor(config-sig)# exit

Apply Changes:?[yes]:

Step 5 Press Enter to apply the changes or type no to discard them.

Verifying the Master Blocking Sensor Configuration

To verify that a master blocking sensor is set up properly or to troubleshoot a master blocking sensor

that is not set up properly, you can use the show statistics network-access command. Make sure that

the forwarding sensor is set up as TLS trusted host if the remote master blocking sensor is using TLS for

web access.

1 2 ... 308 309 310 311 312 313 314 315 316 317 318 ... 421 422

Žádné komentáře

Cisco IPS 7.1 Instalační příručka Strana 313