Signatures Not Producing Alerts; Troubleshooting Idsm-2; Diagnosing Idsm-2 Problems; Switch Commands For Troubleshooting - Cisco 4215 - Intrusion Detection Sys Sensor Configuration Manual

Troubleshooting IDSM-2

service web-server
port 443
exit
For more information, see
If network devices, such as routers, switches, or firewalls, are between the sensor and the workstation,
Step 2
make sure these devices are configured to allow the workstation to access the sensor's web server port.
All remote management communication is performed by the sensor's web server.
For more information, see

Signatures Not Producing Alerts

If you are not seeing any alerts when signatures are firing, make sure that you have configured Produce
Alert as an event action.
You cannot add other actions each time you configure the event actions. You are actually replacing the
Caution
list of event actions every time you configure it, so make sure you choose Produce Alert every time you
configure event actions.
For example, if you choose Produce Alert, but later add another event action and do not add Produce
Alert to the new configuration, alerts will not be sent to the Event Store.
To make sure you are getting alerts, use statistics for the virtual sensor and event store.
Troubleshooting IDSM-2
IDSM-2 has the same software architecture as the 4200 series sensors. You can use the same
troubleshooting tools as outlined in
This section pertains specifically to troubleshooting IDSM-2.
This section contains the following topics:
•
•
•
•
•
•
•
Cisco Intrusion Prevention System Sensor CLI Configuration Guide for IPS 5.0
C-38
Changing Web Server Settings, page
Changing Web Server Settings, page
Diagnosing IDSM-2 Problems, page C-39
Switch Commands for Troubleshooting, page C-39
Status LED Off, page C-40
Status LED On But IDSM-2 Does Not Come Online, page C-42
Cannot Communicate With IDSM-2 Command and Control Port, page C-42
Using the TCP Reset Interface, page C-44
Connecting a Serial Cable to IDSM-2, page C-44
Troubleshooting the 4200 Series Appliance, page
Appendix C Troubleshooting
4-9.
4-9.
C-3.
78-16527-01