McAfee IIP-M80K-ISAA - Network Security Platform M-8000 Quick Start Manual page 4

If prompted, reboot the sensor:
8.
Type: reboot
Note:
The sensor can take up to five minutes to complete its
reboot.
Ping the Manager from the sensor to determine if your
9.
configuration settings to this point have successfully established
the sensor on the network:
At the prompt, type: ping <manager IP address>
If the ping is successful, continue with the following steps. If not,
type show to verify your configuration settings and check that the
information is correct.
Set the shared secret key value for the sensor:
10.
At the prompt, type: set sensor sharedsecretkey.
The sensor then prompts you to enter and, subsequently, confirm
the shared secret key value.
Note:
This value is used to establish a trust relationship between
the sensor and the Manager. The secret key value can be
between 8 and 25 characters of any ASCII text. The shared key
value is case-sensitive. Make sure the value matches the shared
secret key value you provided in the Manager interface.
To verify the configuration information, type show. Check that all
11.
information is correct.
To exit the session, type exit.
12.
Verify successful installation
A handshake process begins between the sensor and the Manager.
The devices will take a few seconds to establish communication.
Perform the following steps to verify successful communication
between the sensor and the Manager.
In the sensor CLI, type: status. The status report appears similar
1.
to this
Return to the Manager. In the ISM Home page, view the Manager
2.
status in the System Health section. Manager status should be up,
and sensor status should be active.
From the ISM Home page, click Configure to open the Configuration
3.
page.
Select your added sensor: Sensors > Sensor_Name. The ports for
4.
this sensor appear under the Sensor_Name node.
Note: "Sensor_Name" indicates the name of the sensor you
added.
Figure 15: Sensor and ports
A policy named Default Inline IPS is active upon sensor addition. To
5.
view this policy, click Policies > IPS Policy Editor. Select Default Inline
IPS from the list and then click View/Edit.
The Default Inline IPS policy contains attacks already
Note:
configured with a "blocking" sensor response action; if any attack
in the policy is triggered, the sensor automatically blocks the
attack. To tune this or any other McAfee-provided policies, you
can clone the policy and then customize it as described in the
Policies Configuration Guide.
Click Sensor_Name > Configure Ports.
6.
Click the button representing the ports on the sensor that you
7.
cabled in STEP1, Cable the Monitoring ports (on page 2). Ensure
that your port settings match the cabling (for example, In-line
mode).
You're up and the running!
Your sensor is actively monitoring connected segments and
communicating with the Manager for administration and management
operations.
Check the ISM home page for alert statistics as attacks are detected.
These are displayed in the Unacknowledged Alert Summary area of
the ISM Home page.
Launch the Alert Manager from the Home page by clicking Real-time
Alert Manager to see alert details.
Intrushield Getting Started Guide
Read the for an overview of the
system. For detailed usage instructions, see the
Configuration Guide—using
the upper-right corner of each window in the Manager.
Having problems? Check the
troubleshooting information. Note that most deployment problems
stem from configuration mismatches the sensor and the network
devices to which it is connected. Check your duplex and
auto-negotiation settings on both devices to ensure and stood are
synchronized.
If you need to contact Technical Support, go to
https://mysupport.mcafee.com.
Contacting Technical Support
On-line
Contact McAfee Technical Support
http://mysupport.mcafee.com.
Registered customers can obtain up-to-date documentation,
technical bulletins, and quick tips on McAfee's 24x7
comprehensive KnowledgeBase. In addition, customers can
also resolve technical issues with the online case submit,
software downloads, and signature updates.
Phone
Technical Support is available 7:00 A.M. to 5:00 P.M. PST
Monday-Friday. Extended 24x7 Technical Support is available
for customers with Gold or Platinum service contracts. Global
phone contact numbers can be found at McAfee Contact
Information
http://www.mcafee.com/us/about/contact/index.html
Note:
McAfee requires that you provide your GRANT ID and
the serial number of your system when opening a ticket with
Technical Support. You will be provided with a user name and
password for the online case submission.
Copyright ® 2001 - 2009 McAfee, Inc. All Rights Reserved.
Intrushield Sensor
ISM, or click the Detailed Help buttons in
Intrushield Troubleshooting Guide
for
page.
700-2080-00-G