17-15
Cisco Intrusion Prevention System Sensor CLI Configuration Guide for IPS 7.2
OL-29168-01
Chapter1 7 Administrative Tasks for the Sensor
Configuring Health Status Information
sensor(config-hea-app)# status red
sensor(config-hea-app)# exit
sensor(config-hea)#
Step 4
Enable the metrics for bypass policy.
sensor(config-hea)# bypass-policy
sensor(config-hea-byp)# enable true
sensor(config-hea-byp)# status yellow
sensor(config-hea-byp)# exit
sensor(config-hea)#
Step 5
Enable the metrics for sensor health and security monitoring.
sensor(config-hea)# enable-monitoring true
sensor(config-hea)#
Step 6
Set the event retrieval thresholds for event retrieval metrics.
sensor(config-hea)# event-retrieval-policy
sensor(config-hea-eve)# enable true
sensor(config-hea-eve)# red-threshold 100000
sensor(config-hea-eve)# yellow-threshold 100
sensor(config-hea-eve)# exit
sensor(config-hea)#
Step 7
Enable health metrics for global correlation.
sensor(config-hea)# global-correlation-policy
sensor(config-hea-glo)# enable true
sensor(config-hea-glo)# exit
sensor(config-hea)#
Step 8
Enable the metrics for heartbeat events to be emitted at the specified interval of seconds.
sensor(config-hea)# heartbeat-events enable 20000
sensor(config-hea)#
Step 9
Set the inspection load threshold.
sensor(config-hea)# inspection-load-policy
sensor(config-hea-ins)# enable true
sensor(config-hea-ins)# red-threshold 100
sensor(config-hea-ins)# yellow-threshold 50
sensor(config-hea-ins)# exit
sensor(config-hea)#
Step 10
Enable the interface down policy.
sensor(config-hea)# interface-down-policy
sensor(config-hea-int)# enable true
sensor(config-hea-int)# status yellow
sensor(config-hea-int)# exit
sensor(config-hea)#
Step 11
Set the number of days until the license expires.
sensor(config-hea)# license-expiration-policy
sensor(config-hea-lic)# enable true
sensor(config-hea-lic)# red-threshold 400000
sensor(config-hea-lic)# yellow-threshold 200000
sensor(config-hea-lic)# exit
sensor(config-hea)#