User Roles - Cisco 4215 - Intrusion Detection Sys Sensor Configuration Manual

Chapter 1 Introducing the CLI Configuration Guide
13.
14.
15.
For procedures specific to the modules, see the following chapters:
•
•
•

User Roles

The CLI for IPS 5.0 permits multiple users to log in at a time. You can create and remove users from the
local sensor. You can only modify one user account at a time. Each user is associated with a role that
controls what that user can and cannot modify
The CLI supports four user roles: Administrator, Operator, Viewer, and Service. The privilege levels for
each role are different; therefore, the menus and available commands vary for each role.
•
•
•
Tip
78-16527-01
Perform miscellaneous tasks to keep your sensor running smoothly.
For the procedures, see Chapter 13, "Administrative Tasks for the Sensor."
Upgrade the IPS software with new signature updates and service packs.
For more information, see
Reimage the application partition and the maintenance partition when needed.
For the procedures, see Chapter 17, "Upgrading, Downgrading, and Installing System Images."
Chapter 15, "Configuring IDSM-2"
Chapter 16, "Configuring NM-CIDS"
Chapter 14, "Configuring AIP-SSM"
Administrators—This user role has the highest level of privileges. Administrators have
unrestricted view access and can perform the following functions:
Add users and assign passwords
–
Enable and disable control of physical interfaces and virtual sensors
–
Assign physical sensing interfaces to a virtual sensor
–
Modify the list of hosts allowed to connect to the sensor as a configuring or viewing agent
–
– Modify sensor address configuration
– Tune signatures
– Assign configuration to a virtual sensor
Manage routers
–
Operators—This user role has the second highest level of privileges. Operators have unrestricted
view access and can perform the following functions:
Modify their passwords
–
Tune signatures
–
Manage routers
–
Assign configuration to a virtual sensor
–
Viewers—This user role has the lowest level of privileges. Viewers can view configuration and
event data and can modify their passwords.
Monitoring applications only require viewer access to the sensor. You can use the CLI to set up
a user account with viewer privileges and then configure the event viewer to use this account to
connect to the sensor.
Cisco Intrusion Prevention System Sensor CLI Configuration Guide for IPS 5.0
Chapter 18, "Obtaining Software."
User Roles
1-3