Cisco 4215 - Intrusion Detection Sys Sensor Configuration Manual page 12

Contents
System Architecture
A
A P P E N D I X
Cisco Intrusion Prevention System Sensor CLI Configuration Guide for IPS 5.0
xii
A-1
System Overview
A-1
System Design
A-1
IPS 5.0 New Features
User Interaction
A-4
Security Features
A-5
MainApp
A-5
MainApp Responsibilities
Event Store
A-7
About Event Store
Event Data Structures
IPS Events
A-8
NotificationApp
A-9
CtlTransSource
A-11
Network Access Controller
About Network Access Controller
Network Access Controller Features
Supported Blocking Devices
ACLs and VACLs
Maintaining State Across Restarts
Connection-Based and Unconditional Blocking
Blocking with Cisco Firewalls
Blocking with Catalyst Switches
LogApp
A-19
AuthenticationApp
A-20
AuthenticationApp Responsibilities
Authenticating Users
Configuring Authentication on the Sensor
Managing TLS and SSH Trust Relationships
Web Server
A-22
SensorApp
A-22
Responsibilities and Components
Packet Flow
A-24
SEAP
A-25
New Features
A-26
CLI
A-28
User Roles
A-28
Service Account
A-29
CLI Behavior
A-30
A-3
A-6
A-7
A-8
A-12
A-12
A-13
A-15
A-16
A-16
A-18
A-19
A-20
A-20
A-21
A-21
A-23
A-17
78-16527-01