Cisco Cisco IPS 4255 Sensor

security appliance. The configuration on the main adaptive security appliance can be used to 
designate which packets/connections should be monitored by the AIP SSM as either promiscuous 
or inline.

When deploying an IPS sensor monitoring two sides of a network device that does TCP sequence 
number randomization, we recommend using a virtual senor for each side of the device. If you are 
using the IDS 4125, which does not support virtualization, configure vs0 to track TCP sessions by 
VLAN and interface.

After you upgrade any IPS software on your sensor, you must restart the IDM to see the latest 
software features. 

IDM does not support any non-English characters, such as the German umlaut or any other special 
language characters. If you enter such characters as a part of an object name through IDM, they are 
turned in to something unrecognizable and you will not be able to delete or edit the resulting object 
through IDM or the CLI.

This is true for any string that is used by CLI as an identifier, for example, names of time periods, 
inspect maps, server and URL lists, and interfaces.

You can only install eight IDSM2s per switch chassis.

The HTML-based IDM has been replaced with a Java applet.

When SensorApp is reconfigured, there is a short period when SensorApp is unable to respond to 
any queries. Wait a few minutes after reconfiguration is complete before querying SensorApp for 
additional information. 

For more information on how many modules Cisco access routers support, refer to 

.

For most IPS platforms, you can now recover the password on the sensor rather than using the service 
account or reimaging the sensor. This section describes how to recover the password for the various IPS 
platforms. It contains the following topics: