Edit Global Settings - Cisco OL-4015-08 User Manual

Chapter 19 Intrusion Prevention System

Edit Global Settings

Enable Syslog Notification
Enable SDEE Notification
Enable Engine Fail Closed
Use Built-in Signatures (as backup)
OL-4015-08
Delete Button
Click to delete a selected location.
Move Up/Down Buttons
Use these buttons to change the order of preference for the URLs in the list.
Edit settings that affect the overall operation of IOS IPS in this window.
Check to enable the router to send alarm, event, and error messages to a syslog
server. A syslog server must be identified in System Properties for this
notification method to work.
Check to enable the router to record SDEE notification events.
Maximum number of SDEE events to store
Specify the maximum number of SDEE events that you want the router to store.
The more events that you allow the router to store, the more memory is used.
Number of concurrent SDEE subscriptions (1-3)
An SDEE subscription is a live feed of SDEE events. Enter the number of SDEE
subscriptions that you want the router to use, to a maximum of 3.
By default, while IOS compiles a new signature for a particular engine, it allows
packets to pass through without scanning for the corresponding engine. Enable
this option to make IOS drop packets during the compilation process.
If IPS does not find or fails to load signatures from the specified location(s), it can
use the IOS built-in signatures to enable IPS. This option is enabled by default.
Cisco Router and Security Device Manager Version 2.2 User's Guide
Global Settings
19-53