cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1155
Views
0
Helpful
11
Replies

configuration clock module IPS

alfredoelias
Level 1
Level 1

I am setting my IPS module but I have trouble putting on the hour. I'm doing it via NTP but when I go to events I get the hour badly adds six coreg hour. I can do to this.

11 Replies 11

Scott Fringer
Cisco Employee
Cisco Employee

Have you also configured the timezone offset  and timezone on the sensor?

conf t

service host

time-zone-settings

offset

Scott

alfredoelias
Level 1
Level 1

time-zone-settings

standard-time-zone-name CST

offset 0

exit

ntp-server 201.247.152.233

sh clock

21:15:22 CST Tue Jun 08 2010

This is the configuration and the problem persists

That's the problem - your offest from GMT is set to 0.  For CST the offset should be -360 with the CDT offset automatically changing to -300 (when you enable summertime in the configuration)

Scott

exit

offset -360

standard-time-zone-name CST

exit

ntp-server 201.247.152.233

the problem persist

Could you provide the following output:

sh clock

sh stat host

Scott

I send the show clock and show stat host

I see the 'sh stat host' output, which indicates successful NTP server synchronization.

I do not see the current output of 'sh clock'.

From the output, is this an AIP-SSM or an IDSM-2 or a different IPS module?

Scott

Hi Scott

thanks for you help this is module IPS in ASA I send the show

ROM-TLC-MIPS-01# sh clock
11:25:31 CST Thu Jun 10 2010

the time is corect but in my view IPS events shows me the 6 hours in advance

OK - so the time is correct on the sensor; that is now confirmed.

Where are you viewing the events that you are seeing the 6 hour time difference?  Are you using IEV, IME, CS-MARS, another tool?

Scott

I can see events in the IPS monitor I do not use anything else only IPS

The event viewer within IDM should present the event in both the sensor local time and sensor UTC time.

Events displayed on the CLI of the sensor via 'sh even alert' should also provide the event time in both local time and UTC time

Scott

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: