Obtaining A List Of Blocked Hosts And Connections - Cisco 4215 - Intrusion Detection Sys Sensor Configuration Manual

Obtaining a List of Blocked Hosts and Connections

To end the manual block:
Step 5
sensor (config-net-gen)# no block-hosts ip_address
Exit network access submode:
Step 6
sensor (config-net-gen)# exit
sensor (config-net)# exit
sensor(config)# exit
sensor#
Obtaining a List of Blocked Hosts and Connections
Use the show statistics command to obtain a list of blocked hosts and blocked connections.
To obtain a list of blocked hosts and connections, follow these steps:
Log in to the CLI.
Step 1
Step 2 Check the statistics for Network Access Controller:
sensor# show statistics network-access
Current Configuration
LogAllBlockEventsAndSensors = true
EnableNvramWrite = false
EnableAclLogging = false
AllowSensorBlock = false
BlockMaxEntries = 250
MaxDeviceInterfaces = 250
NetDevice
State
BlockEnable = true
NetDevice
Cisco Intrusion Prevention System Sensor CLI Configuration Guide for IPS 5.0
10-28
You must end the manual block in the CLI or it is permanent.
Note
Type = Cisco
IP = 10.1.1.1
NATAddr = 0.0.0.0
Communications = telnet
BlockInterface
InterfaceName = fa0/0
InterfaceDirection = in
IP = 10.1.1.1
AclSupport = uses Named ACLs
Version = 12.2
State = Active
Chapter 10 Configuring Blocking
78-16527-01