Cisco Systems IPS4510K9 Configuring Time, Time Sources and the Sensor, IPS Standalone Appliances

Chapter 3 Setting Up the Sensor

Configuring Time

Step 5 Check your new setting. The account of the user jsmith is now unlocked as indicated by the lack of parenthesis.

sensor#		show	users all
	CLI	ID	User	Privilege
*	1349		cisco	administrator
	5824		jsmith	viewer
	9802		tester	operator

For More Information

For the procedure for locking the user accounts, see Locking User Accounts, page 3-33.

Configuring Time

This section describes the importance of having a reliable time source for the sensor. It contains the following topics:

•Time Sources and the Sensor, page 3-35

•Synchronizing IPS Module System Clocks with the Parent Device System Clock, page 3-36

•Correcting Time on the Sensor, page 3-36

•Configuring Time on the Sensor, page 3-36

•Configuring NTP, page 3-42

Time Sources and the Sensor

Note We recommend that you use an NTP server to regulate time on your sensor. You can use authenticated or unauthenticated NTP. For authenticated NTP, you must obtain the NTP server IP address, NTP server key ID, and the key value from the NTP server. You can set up NTP during initialization or you can configure NTP through the CLI, IDM, IME, or ASDM.

The sensor requires a reliable time source. All events (alerts) must have the correct UTC and local time stamp, otherwise, you cannot correctly analyze the logs after an attack. When you initialize the sensor, you set up the time zones and summertime settings. This section provides a summary of the various ways to set the time on sensors.

The IPS Standalone Appliances

•Use the clock set command to set the time. This is the default.

•Configure the appliance to get its time from an NTP time synchronization source.

Note The currently supported Cisco IPS appliances are the IPS 4345, IPS 4360, IPS 4510, and IPS 4520.

	Cisco Intrusion Prevention System Sensor CLI Configuration Guide for IPS 7.2
OL-29168-01		3-35