17-13
Cisco Intrusion Prevention System Sensor CLI Configuration Guide for IPS 7.2
OL-29168-01
Chapter1 7 Administrative Tasks for the Sensor
Configuring Health Status Information
Inspection Load Percentage (last 72 hours) *=maximum #=average
sensor#
Configuring Health Status Information
Configure the health statistics for the sensor in service health monitor submode. Use the show health
command to see the results. The health status categories are rated by red and green with red being
critical.
The following options apply:
•
application-failure-policy {enable | disable} {true | false} status {green | yellow | red}—Lets you
choose to have an application failure applied to the overall sensor health rating.
•
bypass-policy {enable | disable} {true | false} status {green | yellow | red}—Lets you choose to
know if bypass mode is active and have that apply to the overall sensor health rating.
Note
The ASA 5500-X IPS SSP and the ASA 5585-X IPS SSP do not support bypass mode. The
adaptive security appliance will either fail open, fail close, or fail over depending on the
configuration of the adaptive security appliance and the type of activity being done on the
IPS.
•
enable-monitoring {true | false}—Lets you choose to monitor sensor health and security.
•
event-retrieval-policy {enable | disable} {true | false} red-threshold yellow-threshold
seconds—Lets you set a threshold for when the last event was retrieved and have that apply to the
overall sensor health rating. The health status is degraded to red or yellow when that threshold is
met. The range for the threshold is 0 to 4294967295 seconds.
Note
The event retrieval metric keeps track of when the last event was retrieved by an external
monitoring application such as the IME. Disable event retrieval policy if you are not doing
external event monitoring.
•
global-correlation-policy {enable | disable} {true | false}—Lets you apply this metric to the
overall sensor health rating.
•
heartbeat-events {enable | disable} seconds—Lets you enable heartbeat events to be emitted at the
specified interval in seconds and have that apply to the overall sensor health rating. The range for
the interval is 15 to 86400 seconds.
•
inspection-load-policy {enable | disable} {true | false} red-threshold yellow-threshold
seconds—Lets you set the threshold for inspection load. The health status is degraded to red or
yellow when that threshold is met. The range is 0 to 100.
•
interface-down-policy {enable | disa ble} {true | false} status {green | yellow | red} —Lets you
choose to know if one or more enabled interfaces are down and have that apply to the overall sensor
health rating.
•
license-expiration-policy {enable | disable} {true | false} red-threshold yellow-threshold—Lets
you set a threshold for when the license expires and whether this metric is applied to the overall
sensor health rating. The range for the threshold is 0 to 4294967 295 seconds.