Cisco Cisco IPS 4255 Sensor

risk-rating-range 90-100

exit

exit 

[0] Go to the command prompt without saving this config.

[1] Return back to the setup without saving this config.

[2] Save this configuration and exit setup.

Enter 

 to save the configuration. 

Enter your selection[2]: 2 

Configuration Saved.

Reboot the ASA 5585-X IPS SSP.

ips-ssp# reset

Warning: Executing this command will stop all applications and reboot the node.

Continue with reset? []:

Enter 

 to continue the reboot.

After reboot, log in to the sensor, and display the self-signed X.509 certificate (needed by TLS).

ips-ssp# show tls fingerprint

SHA1: 64:9B:AC:DE:21:62:0C:D3:57:2E:9B:E5:3D:04:8F:A7:FD:CD:6F:27

Write down the certificate fingerprints. You need the fingerprints to check the authenticity of the 
certificate when using HTTPS to connect to this ASA 5585-X IPS SSP with a web browser.

Apply the most recent service pack and signature update. You are now ready to configure your 
ASA 5585-X IPS SSP for intrusion prevention.

The following show configuration output is an example of what your configuration may look like. It 
will not match exactly because of the optional setup choices. 

To verify that you initialized your sensor, follow these steps:

Log in to the sensor. 

View your configuration.

sensor# show configuration

! ------------------------------

! Current configuration last modified Wed Feb 05 10:31:16 2014

! ------------------------------

! Version 7.2(2)

! Host:

!     Realm Keys          key1.0

! Signature Definition:

!     Signature Update    S741.0   2013-09-10

! ------------------------------

service interface

physical-interfaces GigabitEthernet0/0

admin-state enabled

exit