Table of Contents
Advertisement
Gathering Information
Health and Network Security Information
When the sensor is first starting, it is normal for certain health metric statuses to be red until the sensor
Caution
is fully up and running.
The ASA 5500-X IPS SSP and the ASA 5585-X IPS SSP do not support bypass mode. The adaptive
Note
security appliance will either fail open, fail close, or fail over depending on the configuration of the
adaptive security appliance and the type of activity being done on the IPS.
Use the show health command in privileged EXEC mode to display the overall health status information
of the sensor. The health status categories are rated by red and green with red being critical.
To display the overall health status of the sensor, follow these steps:
Log in to the CLI.
Step 1
Show the health and security status of the sensor.
Step 2
sensor# show health
Overall Health Status
Health Status for Failed Applications
Health Status for Signature Updates
Health Status for License Key Expiration
Health Status for Running in Bypass Mode
Health Status for Interfaces Being Down
Health Status for the Inspection Load
Health Status for the Time Since Last Event Retrieval
Health Status for the Number of Missed Packets
Health Status for the Memory Usage
Health Status for Global Correlation
Health Status for Network Participation
Security Status for Virtual Sensor vs0
sensor#
Tech Support Information
The show tech-support command is useful for capturing all sensor status and configuration information.
This section describes the show tech-support command, and contains the following topics:
•
•
•
Cisco Intrusion Prevention System Appliance and Module Installation Guide for IPS 7.1
E-84
Understanding the show tech-support Command, page E-85
Displaying Tech Support Information, page E-85
Tech Support Command Output, page E-86
Red
Green
Green
Red
Green
Red
Green
Green
Green
Not Enabled
Red
Not Enabled
Green
Appendix E
Troubleshooting
OL-24002-01
Advertisement
Table of Contents
Troubleshooting
