Cisco Cisco IPS 4255 Sensor

After reboot, log in to the sensor, and display the self-signed X.509 certificate (needed by TLS).

ips-ssp# show tls fingerprint

SHA1: 64:9B:AC:DE:21:62:0C:D3:57:2E:9B:E5:3D:04:8F:A7:FD:CD:6F:27

Write down the certificate fingerprints. You need the fingerprints to check the authenticity of the 
certificate when using HTTPS to connect to this ASA 5585-X IPS SSP with a web browser.

Apply the most recent service pack and signature update. You are now ready to configure your 
ASA 5585-X IPS SSP for intrusion prevention.

The following show configuration output is an example of what your configuration may look like. It 
will not match exactly because of the optional setup choices. 

To verify that you initialized your sensor, follow these steps:

Log in to the sensor. 

View your configuration.

sensor# show configuration

! ------------------------------

! Current configuration last modified Fri Oct 10 09:41:17 2014

! ------------------------------

! Version 7.3(5)

! Host:

!     Realm Keys               key1.0

! Signature Definition:

!     Signature Update         S741.0   2013-09-10

!     Threat Profile Version   2

! ------------------------------

service interface

exit

! ------------------------------

service authentication

exit

! ------------------------------

service event-action-rules rules0

exit

! ------------------------------

service host

network-settings

host-ip 10.106.1.4/24,10.106.1.1

host-name sensor

telnet-option enabled

access-list 0.0.0.0/0

dns-primary-server disabled

exit

time-zone-settings

offset 0

standard-time-zone-name UTC

exit

exit

! ------------------------------

service logger