IPS - IDM options

13 November 2007 PM 06:30

IPS - IDM- TECH- NOTE BY GNANASEKAR.P CCSI - 32710 CCNA/CCNA-S/CCNA-V/CCNP/CCSP Sr. Trainer - cisco NetworkersHOME http://gsekar.blog.co.in http://gsekar.co.nr Bangalore

ALL IPS OPTIONS General network setting: Configuration > sensor setup > network SSH key: Configuration > sensor setup > SSH > sensor key Reboot Configuration > reboot Shutdown Configuration > shutdown sensor Configure allowed host Configuration > sensor setup > allowed hosts Setting time Configuration > sensor setup > time To view or regenerate Configuration > sensor setup > certificates > server certificate Trusted hosts Configuration > sensor setup > certificates > trusted hosts Configuring users Configuration > sensor setup > users Configuring interface Configuration > interface configuration > interface Hardware bypass Configuration > interface configuration > bypass Viewing events Monitoring > events Configuring signatures and alerts Configuration > signature definitions > signature configuration Manage denied attackers Monitoring > denied attackers Advanced inspection policy Configuration > signature definitions > sig0 > miscellaneous > application policy Manual logging: Monitoring > IP logging > add Logging parameter Configuration > signature definitions > sign0 > miscellaneous reassembly Configuration > signature definitions > sig0 > miscellaneous Target value rating Configuration > event action rules > rules0 then target value rating Event variable Configuration > event action rules > rules0 then event variables tab Event action overrides Configuration > event action rules > rules0 then event action overrides tab Event action filter
security Page 1

Event action filter Configuration > event action rules > rules0 then event action filters tab Threat rating Configuration > event action rules > rules0 > general settings External product interface Configuration > external product interfaces Virtual sensor Configuration > analysis engine > virtual sensors Anomaly detection Configuration > anomaly detections > ad0 Configuration > analysis engine > virtual sensors > edit > learn Configuration > analysis engine > virtual sensors > edit > detect Monitoring > anomaly detection POSEF Configuration > policies > event action rules > rules0 > OS identifications Monitoring > OS identifications > learned OS blocking Configuration > blocking > blocking properties Monitoring > active host blocks Monitoring > network blocks Configuration > blocking > master blocking sensor License update Configuration>licensing Service pack update Configuration>update sensor For auto download from tftp Configuration > auto update Restoring Configuration > restore defaults monitoring Monitoring > support information > diagnostics report Version status of application upgrade installed and PEP Monitoring > support information > statistics and monitoring > support information > system information For SNMP Configuration > SNMP > SNMP general configuration

security Page 2