User Manuals: Cisco IPS 4270-20 Security Appliance

Manuals and User Guides for Cisco IPS 4270-20 Security Appliance. We have 1 Cisco IPS 4270-20 Security Appliance manual available for free PDF download: Installation Manual

Cisco IPS 4270-20 Installation Manual (412 pages)

Intrusion Prevention System Appliance and Module Installation Guide for IPS 7.0

Brand: Cisco | Category: Firewall | Size: 6.84 MB

Table of Contents
3
Related Documentation
16
CHAPTER 1 Introducing the Sensor1-1

19
- How the Sensor Functions
  19
  - Capturing Network Traffic
    19
  - Your Network Topology
    21
  - Correctly Deploying the Sensor
    21
  - Tuning the IPS
    21
  - Sensor Interfaces
    22
    
    Understanding Sensor Interfaces
    22
    
    Command and Control Interface
    23
    
    Sensing Interfaces
    24
    
    Interface Support
    24
    
    TCP Reset Interfaces
    27
    
    Interface Restrictions
    28
  - Interface Modes
    30
    
    Promiscuous Mode
    30
    
    Ipv6, Switches, and Lack of VACL Capture
    31
    
    Inline Interface Pair Mode
    32
    
    Inline VLAN Pair Mode
    33
    
    VLAN Group Mode
    33
    
    Deploying VLAN Groups
    34
- Supported Sensors
  35
- IPS Appliances
  36
- IPS Modules
  38
  - Introducing the AIM IPS
    38
  - Introducing the AIP SSM
    40
  - Introducing the IDSM2
    42
  - Introducing the NME IPS
    43
- Time Sources and the Sensor
  44
- Installation Preparation
  47
- Site and Safety Guidelines
  48
  - Site Guidelines
    48
  - Rack Configuration Guidelines
    48
  - Electrical Safety Guidelines
    49
  - Power Supply Guidelines
    50
  - Working in an ESD Environment
    50
- Cable Pinouts
  51
  - 10/100Baset and 10/100/1000Baset Connectors
    52
  - Console Port (RJ-45)
    53
  - To DB-9 or
    54
CHAPTER 2 Installing the IPS 4240 and the IPS 42552-1

55
- Introducing the IPS 4240 and the IPS 4255
  55
Front and Back Panel Features

56
Specifications

58
- Connecting the IPS 4240 to a Cisco 7200 Series Router
  59
Accessories

59
Important Safety Instructions

59
Rack Mounting

60
Installing the IPS 4240 and the IPS 4255

61
Installing the IPS 4240-DC

64
CHAPTER 3 Installing the IPS 42603-1

69
- Introducing the IPS 4260
  69
Supported Interface Cards

70
Hardware Bypass

72
Front and Back Panel Features

74
Specifications

77
Accessories

77
Important Safety Instructions

78
Installing the IPS 4260

78
Rack Mounting

78
- Installing the IPS 4260 in a 4-Post Rack
  78
Chapter 4 Installing the IPS 4270-20

93
- Introducing the IPS 4270-20
  94
- Supported Interface Cards
  95
- Hardware Bypass
  97
- Front and Back Panel Features
  99
- Diagnostic Panel
  103
- Internal Components
  105
- Specifications
  106
- Accessories
  107
- Installing the Rail System Kit
  107
- Installing the IPS 4270-20
  127
- Removing and Replacing the Chassis Cover
  130
- Accessing the Diagnostic Panel
  133
- Installing and Removing Interface Cards
  133
- Installing and Removing Interface Cards
  134
- Installing and Removing the Power Supply
  136
- Installing and Removing Fans
  141
- Troubleshooting Loose Connections
  143
CHAPTER 5 Installing the AIM IPS5-1

145
- Specifications
  145
Before Installing the AIM IPS

146
Software and Hardware Requirements

146
Interoperability with Other IPS Modules

147
Restrictions

147
Hardware Interfaces

148
Installation and Removal Instructions

149
Verifying Installation

150
- Specifications
  151
- Installing the Aip Ssm
  151
- Memory Specifications
  152
- Hardware and Software Requirements
  152
- Indicators
  152
Chapter 6 Installing the AIP SSM

152
- Installation and Removal Instructions
  153
CHAPTER 7 Installing the IDSM27-1

157
- Specifications
  157
- Software and Hardware Requirements
  158
- Minimum Supported the IDSM2 Configurations
  158
- Using the TCP Reset Interface
  159
- Front Panel Features
  159
- Installation and Removal Instructions
  160
  - Required Tools
    160
  - Slot Assignments
    161
  - Installing the IDSM2
    161
  - Verifying Installation
    165
  - Removing the IDSM2
    166
- Enabling Full Memory Tests
  168
  - Catalyst Software
    168
  - Cisco IOS Software
    169
- Resetting the IDSM2
  169
  - Catalyst Software
    169
  - Cisco IOS Software
    170
- Powering the IDSM2 up and down
  171
  - Catalyst Software
    171
  - Cisco IOS Software
    172
CHAPTER 8 Installing the NME IPS8-1

173
- Specifications
  173
- Before Installing the NME IPS
  174
- Software and Hardware Requirements
  174
- Interoperability with Other IPS Modules
  175
- Restrictions
  175
- Hardware Interfaces
  176
- Installation and Removal Instructions
  177
- Verifying Installation
  178
CHAPTER 9 Logging in to the Sensor9-1

179
- Supported User Roles
  179
- Logging in to the Appliance
  180
- Connecting an Appliance to a Terminal Server
  181
- Logging in to the AIM IPS
  182
  - The AIM IPS and the Session Command
    182
  - Sessioning in to the AIM IPS
    183
- Logging in to AIP SSM
  184
- Logging in to the IDSM2
  186
- Logging in to the NME IPS
  187
  - The NME IPS and the Session Command
    187
  - Sessioning in to the NME IPS
    188
- Logging in to the Sensor
  189
CHAPTER 10 Initializing the Sensor10-1

191
- Understanding Initialization
  191
- Simplified Setup Mode
  191
- System Configuration Dialog
  192
- Basic Sensor Setup
  194
- Advanced Setup
  197
  - Advanced Setup for the Appliance
    198
  - Advanced Setup for the AIM IPS
    203
  - Advanced Setup for the AIP SSM
    206
  - Advanced Setup for the IDSM2
    210
  - Advanced Setup for the NME IPS
    215
- Verifying Initialization
  218
Chapter 11 Obtaining Software

221
Chapter 12 Upgrading, Downgrading, and Installing System Images

237
APPENDIX A Troubleshooting A-1

279
- Bug Toolkit
  279
- Preventive Maintenance
  280
- Disaster Recovery
  284
- Recovering the Password
  285
  - Understanding Password Recovery
    286
  - Recovering the Appliance Password
    286
    
    Using the GRUB Menu
    286
    
    Using ROMMON
    287
  - Recovering the AIM IPS Password
    288
  - Recovering the AIP SSM Password
    288
  - Recovering the IDSM2 Password
    291
  - Recovering the NME IPS Password
    291
  - Disabling Password Recovery
    292
  - Verifying the State of Password Recovery
    293
  - Troubleshooting Password Recovery
    293
- Time and the Sensor
  294
- Advantages and Restrictions of Virtualization
  296
- Supported Mibs
  297
- When to Disable Anomaly Detection
  298
- Troubleshooting Global Correlation
  298
- Analysis Engine Not Responding
  299
- Troubleshooting External Product Interfaces
  300
  - External Product Interfaces Issues
    300
  - External Product Interfaces Troubleshooting Tips
    301
- Troubleshooting the Appliance
  301
  - Hardware Bypass and Link Changes and Drops
    302
  - Troubleshooting Loose Connections
    302
  - Analysis Engine Is Busy
    303
  - Connecting the IPS 4240 to a Cisco 7200 Series Router
    303
  - Communication Problems
    304
    
    Cannot Access the Sensor CLI through Telnet or SSH
    304
    
    Correcting a Misconfigured Access List
    306
    
    Duplicate IP Address Shuts Interface down
    307
  - Sensorapp and Alerting
    308
    
    Sensorapp Not Running
    308
    
    Physical Connectivity, SPAN, or VACL Port Issue
    310
    
    Unable to See Alerts
    311
    
    Sensor Not Seeing Packets
    313
    
    Cleaning up a Corrupted Sensorapp Configuration
    315
  - Blocking
    315
    
    Troubleshooting Blocking
    315
    
    Verifying ARC Is Running
    315
    
    Verifying ARC Connections Are Active
    316
    
    Device Access Issues
    319
    
    Verifying the Interfaces and Directions on the Network Device
    321
    
    Enabling SSH Connections to the Network Device
    321
    
    Blocking Not Occurring for a Signature
    322
    
    Verifying the Master Blocking Sensor Configuration
    323
  - Logging
    324
    
    Understanding Debug Logging
    324
    
    Enabling Debug Logging
    325
    
    Zone Names
    328
    
    Directing Cidlog Messages to Syslog
    329
  - TCP Reset Not Occurring for a Signature
    330
  - Software Upgrades
    331
    
    Upgrading and Analysis Engine
    332
    
    Which Updates to Apply and Their Prerequisites
    332
    
    Issues with Automatic Update
    332
    
    Updating a Sensor with the Update Stored on the Sensor
    332
- Troubleshooting IDM
  334
- Troubleshooting IME
  337
  - Time Synchronization on IME and the Sensor
    337
  - Not Supported Error Message
    337
- Troubleshooting the IDSM2
  337
- Troubleshooting the AIP SSM
  344
- Troubleshooting the AIM IPS and the NME IPS
  347
  - Interoperability with Other IPS Network Modules
    347
- Gathering Information
  348
- Version Information
  352
  - Understanding the Show Version Command
    352
  - Displaying Version Information
    352
- Statistics Information
  354
  - Understanding the Show Statistics Command
    355
  - Displaying Statistics
    355
- Interfaces Information
  365
  - Understanding the Show Interfaces Command
    365
  - Interfaces Command Output
    365
- Events Information
  366
  - Sensor Events
    366
  - Understanding the Show Events Command
    367
  - Displaying Events
    367
  - Clearing Events
    370
- Ciddump Script
  370
- Uploading and Accessing Files on the Cisco FTP Site
  371
Troubleshooting

279

Cisco Categories

Switch IP Phone

Network Router Wireless Access Point Network Hardware

More Cisco Manuals

User Manuals: Cisco IPS 4270-20 Security Appliance

Cisco IPS 4270-20 Installation Manual (412 pages)

Table of Contents

CHAPTER 1 Introducing the Sensor1-1

CHAPTER 2 Installing the IPS 4240 and the IPS 42552-1

Front and Back Panel Features

Specifications

Accessories

Important Safety Instructions

Rack Mounting

Installing the IPS 4240 and the IPS 4255

Installing the IPS 4240-DC

CHAPTER 3 Installing the IPS 42603-1

Supported Interface Cards

Hardware Bypass

Front and Back Panel Features

Specifications

Accessories

Important Safety Instructions

Installing the IPS 4260

Rack Mounting

Chapter 4 Installing the IPS 4270-20

CHAPTER 5 Installing the AIM IPS5-1

Before Installing the AIM IPS

Software and Hardware Requirements

Interoperability with Other IPS Modules

Restrictions

Hardware Interfaces

Installation and Removal Instructions

Verifying Installation

Chapter 6 Installing the AIP SSM

CHAPTER 7 Installing the IDSM27-1

CHAPTER 8 Installing the NME IPS8-1

CHAPTER 9 Logging in to the Sensor9-1

CHAPTER 10 Initializing the Sensor10-1

Chapter 11 Obtaining Software

Chapter 12 Upgrading, Downgrading, and Installing System Images

APPENDIX A Troubleshooting A-1

Troubleshooting

Related Products

Cisco Categories