Cisco 4215 - Intrusion Detection Sys Sensor Configuration Manual page 7

Configuring IP Logging
8
C H A P T E R
Displaying and Capturing Live Traffic on an Interface
9
C H A P T E R
Configuring Blocking
10
C H A P T E R
78-16527-01
8-1
About IP Logging
8-1
Configuring Automatic IP Logging
Configuring Manual IP Logging for a Specific IP Address
Stopping Active IP Logs
8-4
Copying IP Log Files to Be Viewed
About Packet Display and Capture
Displaying Live Traffic on an Interface
Capturing Live Traffic on an Interface
Copying the Packet File
9-6
Erasing the Packet File
9-7
10-1
Understanding Blocking
10-1
Blocking Prerequisites
10-3
Supported Blocking Devices
Configuring Blocking Properties
Allowing the Sensor to Block Itself
Disabling Blocking
10-6
Setting Maximum Block Entries
Setting the Block Time
Enabling ACL Logging
Enabling Writing to NVRAM
Logging All Blocking Events and Errors
Configuring the Maximum Number of Blocking Interfaces
Configuring Addresses Never to Block
Configuring User Profiles
Configuring Blocking Devices
How the Sensor Manages Devices
Configuring the Sensor to Manage Cisco Routers
Routers and ACLs
Configuring the Sensor to Manage Cisco Routers
Configuring the Sensor to Manage Catalyst 6500 Series Switches and Cisco 7600 Series
Routers
10-21
Switches and VACLs
Cisco Intrusion Prevention System Sensor CLI Configuration Guide for IPS 5.0
8-2
8-6
9-1
9-2
9-4
10-3
10-4
10-4
10-8
10-10
10-11
10-12
10-13
10-15
10-17
10-18
10-18
10-19
10-21
8-3
9-1
10-14
10-19
10-20
Contents
vii