|
|
|
1 - 10 of
800 results for
Tune the IPS for False Positive Prevention Using Event Action Filter
|
|
|
|
This document provides the steps required in order to tune the IPS for False Positive Prevention using IDM or IPS Manager Express (IME).
www.cisco.com/en/US/products/sw/secursw/ps2113/products_tech_note09186a0080bc7910.shtml
06 Jul 2012
event action rules IPS CLI commands, configuring event action variables, configuring event action target value ratings, configuring event action overrides, configuratin event action filters, configuring OS identifications, configuring...
References:
12
TAC
www.cisco.com/en/US/docs/security/ips/7.0/configuration/guide/cli/cli_event_action_rules.html
22 Apr 2009
This document describes the exclusion of false positive alarms for Cisco Secure Intrusion Prevention System (IPS).
www.cisco.com/en/US/products/hw/vpndevc/ps4077/products_tech_note09186a008009404e.shtml
26 Oct 2009
...all the event actions, see Event Actions. This section describes...configure OS maps, and contains the following topics: •Understanding...type. The sensor then uses the OS of the target host...risk rating of the alert for the attack and/or the sensor may filter the alert for the attack...rating to reduce the number of false positive alerts (a benefit in IDS...suspicious packets (a benefit in IPS mode). Passive OS fingerprinting...
www.cisco.com/en/US/docs/security/ips/6.2/configuration/guide/cli/cli_event_action_rules.html
31 Oct 2008
Cisco Intrusion Prevention System Sensor CLI Configuration Guide for IPS 7.1 Configuring Event Action Rules Download this...Action Rules Download the complete book Click...and/or the sensor may filter the alert for the attack. You can then...to reduce the number of false positive alerts (a benefit in...packets (a benefit in IPS mode). Passive OS fingerprinting...
References:
5
TAC
www.cisco.com/en/US/docs/security/ips/7.1/configuration/guide/cli/cli_event_action_rules.html
04 Apr 2011
IPS system architecture description, IPS user interaction, IPS security features, MainApp description, SensorApp description, CollaborationApp description, CLI description, IPS communications, IPS file structure, IPS application, MainApp responsibilities, Event...
www.cisco.com/en/US/docs/security/ips/7.0/configuration/guide/cli/cli_system_architecture.html
22 Apr 2009
...signature ID(s) for this item (for example, 1000-2000,3000-3000...stop-on-match {true | false}—Continues evaluating filters or stops when this filter item is matched. •subsignature-id-range...set of subsignature ID(s) for this item (for example, 0-2...8000-10000). To configure event action filters, follow these steps: Step 1 Log in to the CLI using an account with administrator...
www.cisco.com/en/US/docs/security/ips/6.0/configuration/guide/cli/cliEvAct.html
19 Sep 2007
...Editing, and Deleting Event Action Variables. This section...configure OS maps, and contains the following topics: •Understanding...type. The sensor then uses the OS of the target host...risk rating of the alert for the attack and/or the sensor may filter the alert for the attack...rating to reduce the number of false positive alerts (a benefit in IDS...suspicious packets (a benefit in IPS mode). Passive OS fingerprinting...
www.cisco.com/en/US/docs/security/ips/7.2/configuration/guide/cli/cli_event_action_rules.html
29 Apr 2013
...all the event actions, see Event Actions. This section describes...configure OS maps, and contains the following topics: •Understanding...type. The sensor then uses the OS of the target host...risk rating of the alert for the attack and/or the sensor may filter the alert for the attack...rating to reduce the number of false positive alerts (a benefit in IDS...suspicious packets (a benefit in IPS mode). Passive OS fingerprinting...
www.cisco.com/en/US/docs/security/ips/6.1/configuration/guide/cli/cli_event_action_rules.html
30 Apr 2008
...Blocking on IPS for ASA/PIX...2009 Tune the IPS for False Positive Prevention Using Event Action Filter 06/Jul...
www.cisco.com/en/US/products/sw/secursw/ps2113/prod_configuration_examples_list.html
25 Apr 2005
|
|
|
|
