|
|
|
1 - 10 of
134 results for
IPS 5.x and later: Tuning the Signature with Event Action Filter Using CLI and IDM
|
|
|
|
This document describes how to tune the signature with the Event Action Filter in the Cisco Intrusion Prevention System (IPS) with the Command Line Interface (CLI) and IDS Device Manager (IDM).
www.cisco.com/en/US/products/sw/secursw/ps2113/products_tech_note09186a00808518b2.shtml
31 May 2007
...which contains the list of the...associated with the signature. This category...For most IPS platforms...rather than using the service...or down), events information...lowered by event actions that have been...change from 5.x may cause...through the CLI, IDM, IDS MC...through the CLI, IDM, IDS MC...
www.cisco.com/en/US/docs/security/ips/6.0/configuration/guide/cli/cliArch.html
19 Sep 2007
...Troubleshooting the 4200 Series...to the sensor CLI. Step 8 Start the IPS services: sensor...to an account with administrator...Configuration Guide for IPS 6.1 OL-15169-01...Occurring for a Signature, page C-42...properly by using the show version...still appears in IDM, IME, and...Verify that the Event Action is set to Block...
www.cisco.com/en/US/docs/security/ips/6.1/configuration/guide/idm/idm_troubleshooting.pdf
849KB
...Settings. •For the CLI procedure for changing the Web server settings...any alerts when signatures are firing, make...Produce Alert as an event action. Caution You cannot...Produce Alert, but later add another event...getting alerts, use statistics for the...Cannot Communicate With IDSM2 Command and...SSH, Telnet, IDM, Event Server...
www.cisco.com/en/US/docs/security/ips/6.0/installation/guide/hwTS.html
20 Sep 2007
...Scans for latest anti-virus...viruses on the network... Works with NAC appliances...CS-MARS on event monitoring...No Yes Signature support Subset...Updates & Tuning CLI, File copy...3.2 Event Notification...RR) & Signature Event Action Proc. based...active in the router...Troubleshooting Use Cases ...event action filtering and overrides...generated by IOS IPS * Version 5.x Signature...11)T2 or later) ...
www.cisco.com/en/US/prod/collateral/vpndevc/ps6525/ps7264/ps6634/IOS_IPS_Technical_Review.pdf
18 Oct 2008
5057KB
...example) Used to understand...System Sensor CLI Configuration...Participation The IPS sensor collaborates with the global...determine which actions, if any...Caution As with signature updates...string Events Config ...Cisco IPS Cisco Data...Tools (CLI/IDM/IME/ CSM...blocking with the ability of...following actions are configured...boxes as the event action for particular signatures, and add...appliances do not use ACLs or VACLs...System Sensor CLI Configuration Guide for IPS 7.0 OL-18482-01...configured with AAA) • Login...changed, IDM, IME, and...
www.cisco.com/en/US/docs/security/ips/7.0/configuration/guide/cli/CLIGuide7_0.pdf
9221KB
...Alert, but later add another event action and do not...Alert to the new configuration...actions to signatures, see Assigning...You can use the same...Communicate With the IDSM2...Telnet, IDM, Event...sensor# show events alert past...59 UTC signature: description...seconds in the past. ...uid=0) Use the clear...in to the CLI using an account with administrator...access to IDM, IME, or...including the IPS processes...
www.cisco.com/en/US/docs/security/ips/6.0/configuration/guide/cli/cliTS.html
19 Sep 2007
...on installing the sensor properly...to the sensor CLI. Step 8 Start the IPS services. sensor...to an account with administrator...information on IPS system architecture...Occurring for a Signature •Verifying...properly by using the show version...still appears in IDM, IME, and...Verify that the Event Action is set to Block...
www.cisco.com/en/US/docs/security/ips/6.1/configuration/guide/cli/cli_troubleshooting.html
22 Aug 2008
... –Fidelity of the signature –Relevance of the potential attack with respect to the target...the target host Event RR helps reduce...alert. •Event action filters and processing...filtered all actions. 5.x event filters handle...support concurrent use of the interfaces...libpcap-based reader The CLI provides the sensor...Behavior The CLI for IPS 5.1 permits multiple...
www.cisco.com/en/US/docs/security/ips/5.1/configuration/guide/cli/cliArch.html
02 May 2007
...Mode using CLI and IDM Configuration...Inspection and Signature Alerts New...6.X and later: Email Notifications using IME Configuration...Virtual Sensors with IME Configuration...Disable the Summary of a Specific Event Using IDM...NTP on IPS Configuration...2011 IPS 5.x and later: Tuning the Signature with Event Action Filter Using CLI...
www.cisco.com/en/US/products/sw/secursw/ps2113/prod_configuration_examples_list.html
25 Apr 2005
|
|
|
|
