Cisco QuickVPN - PC Administration Manual page 149

Intrusion Prevention System
Configuring IPS
STEP 1
Cisco SA 500 Series Security Appliances Administration Guide
Click IPS on the menu bar, and then click IPS Setup in the navigation tree.
—OR—From the Getting Started (Advanced) page, under Intrusion Prevention
System, click Update Signatures.
The IPS Configuration page appears.
• IPS Enable: By default, IPS is disabled. To enable IPS for a particular zone,
select either LAN or DMZ or both for the zone(s) that you want to protect.
For example: Enabling IPS protection on the LAN zone enforces IPS on all
incoming and outgoing LAN traffic.
Click Apply to save your settings, or click Reset to revert to the saved
settings.
• IPS Status: Displays the IPS Signatures status, the IPS license expiration
date, the signature file version, and the date that the security device last
checked for signature updates.
- Click Update Now to immediately update new signatures if they are
available. This option is only active if the Automatically Update Signature
box is checked.
- Click the View IPS Logs link to view the IPS log messages. To display
messages generated by IPS, you must choose IPS as the facility. For
more information see
• Automatic Signature Updates: IPS uses signature files to identify an attack
in progress. You can configure the security appliance to automatically
update the IPS signatures when they become available.
- To enable the auto update option, check the Automatically Update
Signatures check box.
- Enter your Cisco.com User Name and Password to authenticate to the
signature update server. These credentials are only required once.
- Click Apply to save your settings.
• Manual Signature Updates: To manually update the latest signature file,
click the Cisco.com link to obtain the file and download it to your computer.
Browse to the location of the signature file on the local PC and then click
Upload.
View Logs Status, page
6
46.
149