Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

IPS 4255

Dear all i have an issue while configuring Cisco IPS4255 in lab,

when i configure the two interfaces of device as inline interface pair mode and create an attack using any signature such as 2004 , 11020, 3401 , the actions of signature i.e.  deny packet inlinle, or  deny connection inline are not working mean that these two options when selected dnt block the packets or connections of specified traffic , although the events show that deny packet inline and deny connection inline are getting true value.

Only option that works from the list is ' deny attacker inline' for any of the signature.

Is that because of licensing issue because my device doe not have valid license installed in it right now or i am not configuring the device properly.

Thx in advance for kind help

asif

1 ACCEPTED SOLUTION

Accepted Solutions
Gold

IPS 4255

The lack of a current license will not prevent proper sensor operation. It should still block traffic as you have configured.

The only limitation of an unlicensed sensor is you can not install signature updates (you can only install software updates).

- Bob

2 REPLIES
Gold

IPS 4255

The lack of a current license will not prevent proper sensor operation. It should still block traffic as you have configured.

The only limitation of an unlicensed sensor is you can not install signature updates (you can only install software updates).

- Bob

New Member

IPS 4255

thank you bob for your answer, it is working fine now , you were right, issue was that i did configured event action overriding in IPS and just selected "Deny attacker inline" option, thats why every signature's action was getting override. It is working without license.

515
Views
0
Helpful
2
Replies
CreatePlease to create content