Configuring Ids; Configuring Ids Sensors; Using The Gui To Configure Ids Sensors - Cisco 2100 Series Configuration Manual

Chapter 5 Configuring Security Solutions

Configuring IDS

The Cisco intrusion detection system/intrusion prevention system (CIDS/IPS) instructs controllers to
block certain clients from accessing the wireless network when attacks involving these clients are
detected at Layer 3 through Layer 7. This system offers significant network protection by helping to
detect, classify, and stop threats including worms, spyware/adware, network viruses, and application
abuse. Two methods are available to detect potential attacks:
•
•
Note The Cisco wireless intrusion prevention system (wIPS) is also supported on the controller through WCS.
Refer to the

Configuring IDS Sensors

You can configure IDS sensors to detect various types of IP-level attacks in your network. When the
sensors identify an attack, they can alert the controller to shun the offending client. When you add a new
IDS sensor, you register the controller with that IDS sensor so that the controller can query the sensor
to get the list of shunned clients. You can configure IDS sensor registration through either the GUI or
the CLI.

Using the GUI to Configure IDS Sensors

Follow these steps to configure IDS sensors using the controller GUI.
Click Security > Advanced > CIDs > Sensors to open the CIDS Sensors List page appears (see
Step 1
Figure
Figure 5-53
This page lists all of the IDS sensors that have been configured for this controller.
Note
To add an IDS sensor to the list, click New. The CIDS Sensor Add page appears (see
Step 2
OL-17037-01
IDS sensors, see below
IDS signatures, see page 5-107
"Configuring wIPS" section on page 5-119
5-53).
CIDS Sensors List Page
If you want to delete an existing sensor, hover your cursor over the blue drop-down arrow for
that sensor and choose Remove.
for more information.
Cisco Wireless LAN Controller Configuration Guide
Configuring IDS
Figure 5-54).
5-103