Cisco Cisco IPS 4520 Sensor
67
Release Notes for Cisco Intrusion Prevention System 7.1(6)E4
OL-27710-01
Disabling Anomaly Detection
Step 7
Click Apply to apply your changes and save the revised configuration.
For More Information
For more detailed information about anomaly detection, refer to
Enabling Anomaly Detection Using the CLI
To enable anomaly detection, follow these steps:
Step 1
Log in to the CLI using an account with administrator privileges.
Step 2
Enter analysis engine submode.
sensor# configure terminal
sensor(config)# service analysis-engine
sensor(config-ana)#
Step 3
Enter the virtual sensor name that contains the anomaly detection policy you want to enable.
sensor(config-ana)# virtual-sensor vs0
sensor(config-ana-vir)#
Step 4
Enable anomaly detection operational mode.
sensor(config-ana-vir)# anomaly-detection
sensor(config-ana-vir-ano)# operational-mode detect
sensor(config-ana-vir-ano)#
Step 5
Exit analysis engine submode.
sensor(config-ana-vir-ano)# exit
sensor(config-ana-vir)# exit
sensor(config-ana-)# exit
Apply Changes:?[yes]:
Step 6
Press Enter to apply your changes or enter
no
to discard them.
For More Information
For more detailed information about anomaly detection, refer to
Disabling Anomaly Detection
The following section explains how to disable anomaly detection through the IDM, IME, or the CLI. It
contains the following topics:
contains the following topics:
•
•