Cisco Cisco IPS 4520 Sensor Libro bianco

Pagina di 79
49
Intrusion Prevention
August 2012 Series
49
Step 10:  
In the 
Specify traffic for IPS Scan
 dialog box, under 
Traffic
Inspection Mode
, select 
Inline
, and then click 
OK
. If the Cisco ASA already 
had a default traffic allocation policy, IDM will throw a warning window that 
“The Service Rule Policy you are trying to create already exists.” If you 
receive this warning window, cancel the current window and proceed to the 
next step. 
Step 11:  
 Below the 
Packet Flow Diagram for the selected Rule
 panel, 
click 
Start
. This verifies the Traffic Allocation configuration
.
 The animation 
illustrates a packet being sent to the IPS module and the egress interface. 
The animation may display a different platform that might be incorrect 
compared to the one that you are configuring.  This will not impact the 
deployment and is merely a known cosmetic bug.  
Step 12:  
At the bottom of the Startup Wizard screen, click 
Finish
.
Step 13:  
When you are prompted if you want to commit your changes to the 
sensor, click 
Yes
.