Cisco Systems IPS4520K9 Network Router User Manual


 
E-81
Cisco Intrusion Prevention System Appliance and Module Installation Guide for IPS 7.1
OL-24002-01
Appendix E Troubleshooting
Gathering Information
This section contains the following topics:
Health and Network Security Information, page E-81
Tech Support Information, page E-82
Version Information, page E-85
Statistics Information, page E-88
Interfaces Information, page E-100
Events Information, page E-101
cidDump Script, page E-105
Uploading and Accessing Files on the Cisco FTP Site, page E-106
Health and Network Security Information
Caution
When the sensor is first starting, it is normal for certain health metric statuses to be red until the sensor
is fully up and running.
Note
The ASA 5500-X IPS SSP and the ASA 5585-X IPS SSP do not support bypass mode. The adaptive
security appliance will either fail open, fail close, or fail over depending on the configuration of the
adaptive security appliance and the type of activity being done on the IPS.
Use the show health command in privileged EXEC mode to display the overall health status information
of the sensor. The health status categories are rated by red and green with red being critical. To display
the overall health status of the sensor, follow these steps:
Step 1
Log in to the CLI.
Step 2
Show the health and security status of the sensor.
sensor# show health
Overall Health Status Red
Health Status for Failed Applications Green
Health Status for Signature Updates Green
Health Status for License Key Expiration Red
Health Status for Running in Bypass Mode Green
Health Status for Interfaces Being Down Red
Health Status for the Inspection Load Green
Health Status for the Time Since Last Event Retrieval Green
Health Status for the Number of Missed Packets Green
Health Status for the Memory Usage Not Enabled
Health Status for Global Correlation Red
Health Status for Network Participation Not Enabled
Security Status for Virtual Sensor vs0 Green
sensor#