ccna 6

ccna 6.The CiscoIOS IPS Deployment Guide recommends using the IPSRule wizard. This wizard does more than just configure a rule; it performs all CiscoIOS IPS configuration steps.5.3.2.2 Starting the IPS Rule WizardBefore using Cisco Configuration Expert to configure IPS, load the latest IPS features and public key (if necessary) from cisco.comT. Using Cisco Configuration Expert to configure CiscoIOSIPS on a router or security device involves the following steps. Step 1 Start Cisco Configuration Expert. On the menu bar, click Configure > Security > Intrusion Prevention > Create IPS.Step 2 Click the LaunchlPSRule Wizard button. If SDEE notification is not enabled on the router, a prompt displays indicating that Cisco Configuration Expert will open a subscription on the router for SDEE events. Click OK.Step 3 Read the contents of the WelcometotheIPS PoliciesWizard screen and click the Next button.Step 4 In the Select Interfaces window, select the interface to which you want to apply the IPS rule and determine the direction of the traffic by checking one check box or checking both check boxes. Checking both the Inbound and Outbound checkboxes will apply the rule to traffic in both directions. Click Next.5.3.2.3 Specifying Feature FilesCisco IOS IPS compares traffic to features in a feature definition file (SDF). The SDF can exist in the router's flash memory or on a remote system to which the router has access. Town to specify the location of multiple SDF files so that when the routing sugar cannot access the first location, it can access the other locations until the SDF is found.Step 5 In the SignatureFile panel of the SignatureFileandPublicKey window, select Specifythesignature file you want to use with the IOS IPS or Get the latest signature file from Cisco.com and save to PC option, and fill in the text box as appropriate. The feature file is an IOS IPS upgrade package file named I0S.Sm7.CLI.pkg, and nnn represents the number of the feature set.Step 6 If you already have a copy of the signature file, and therefore do not need to download the signature file from Cisco.com±, click the [...] button next to the Specifythe signature file you want to use with IOS IPS option, which displays the Specify Signature File window. In this window, select how to use the router to access the file. For example, the router can access the file through