Time Sources And The Sensor; Understanding Time On The Sensor - Cisco IPS-4240-K9 - Intrusion Protection Sys 4240 Installation Manual

Time Sources and the Sensor

Time Sources and the Sensor
This section explains the importance of having a reliable time source for the sensors and how to correct
the time if there is an error. It contains the following topics:
•
•

Understanding Time on the Sensor

The sensor requires a reliable time source. All events (alerts) must have the correct UTC and local time
stamp, otherwise, you cannot correctly analyze the logs after an attack. When you initialize the sensor,
you set up the time zones and summertime settings. for more information, see
page
Here is a summary of ways to set the time on sensors:
•
•
Be sure to set the time zone and summertime settings on both the switch and IDSM-2 to ensure that the
Caution
UTC time settings are correct. The local time of IDSM-2 could be incorrect if the time zone and/or
summertime settings do not match between IDSM-2 and the switch.
Installing Cisco Intrusion Prevention System Appliances and Modules 5.0
1-14
Understanding Time on the Sensor, page 1-14
Correcting the Time on the Sensor, page 1-16
9-2.
For appliances
– Use the clock set command to set the time. This is the default.
For the procedure, refer to
Use NTP
–
You can configure the appliance to get its time from an NTP time synchronization source. For
the procedure, refer to
server IP address, the NTP key ID, and the NTP key value. You can set up NTP on the appliance
during initialization or you can configure NTP through the CLI, IDM, or ASDM.
Note We recommend that you use an NTP time synchronization source.
For IDSM-2
– IDSM-2 can automatically synchronize its clock with the switch time. This is the default.
The UTC time is synchronized between the switch and IDSM-2. The time zone and
Note
summertime settings are not synchronized between the switch and IDSM-2.
Manually Setting the
Configuring a Cisco Router to be an NTP Server.
Chapter 1
Initializing the Sensor,
Clock.
You will need the NTP
Introducing the Sensor
78-16124-01