Configuring Time; Time Sources And The Sensor - Cisco 4215 - Intrusion Detection Sys Sensor Configuration Manual

Configuring Time

sensor(config-aut)# exit
sensor(config)# exit
sensor# show users all
*
The account of the user
To unlock jsmith's account, reset the password:
Step 8
sensor# configure terminal
sensor(config)# password jsmith
Enter New Login Password: ******
Re-enter New Login Password: ******
Configuring Time
This section describes the importance of having a reliable time source for the sensor. It contains the
following topics:
•
•
•
•

Time Sources and the Sensor

The sensor requires a reliable time source. All events (alerts) must have the correct UTC and local time
stamp, otherwise, you cannot correctly analyze the logs after an attack. When you initialize the sensor,
you set up the time zones and summertime settings. For more information, see
page
Here is a summary of ways to set the time on sensors:
•
Cisco Intrusion Prevention System Sensor CLI Configuration Guide for IPS 5.0
4-18
CLI ID User Privilege
1349 cisco administrator
5824 (jsmith) viewer
9802 tester operator
jsmith
Time Sources and the Sensor, page 4-18
Correcting Time on the Sensor, page 4-20
Configuring Time on the Sensor, page 4-21
Configuring NTP, page 4-27
3-2.
For appliances
– Use the clock set command to set the time. This is the default.
For the procedure, see
Use NTP
–
You can configure the appliance to get its time from an NTP time synchronization source. See
Configuring a Cisco Router to be an NTP Server, page
address, the NTP key ID, and the NTP key value. You can set up NTP on the appliance during
initialization or you can configure NTP through the CLI, IDM, or ASDM.
Note We recommend that you use an NTP time synchronization source.
is locked as indicated by the parenthesis.
Manually Setting the System Clock, page
Chapter 4 Initial Configuration Tasks
Initializing the Sensor,
4-22.
4-28. You will need the NTP server IP
78-16527-01