General Settings - Cisco 4215 - Intrusion Detection Sys Sensor Configuration Manual

General Settings

-----------------------------------------------
INACTIVE list-contents
-----------------------------------------------
-----------------------------------------------
sensor(config-rul)#
To move a filter to the inactive list:
Step 10
sensor(config-rul)# filters move name1 inactive
Verify that the filter has been moved to the inactive list:
Step 11
Exit event action rules submode:
Step 12
sensor(config-rul)# exit
Apply Changes:?[yes]:
Press Enter to apply your changes or type
Step 13
General Settings
This section describes the general settings, and contains the following topics:
•
•
•
•
•
•
Cisco Intrusion Prevention System Sensor CLI Configuration Guide for IPS 5.0
6-14
sensor(config-rul-fil)# exit
sensor(config-rul)# show settings
-----------------------------------------------
INACTIVE list-contents
-----------------------------------------------
-----------------------------------------------
NAME: name1
-----------------------------------------------
signature-id-range: 900-65535 <defaulted>
subsignature-id-range: 0-255 <defaulted>
attacker-address-range: 0.0.0.0-255.255.255.255 <defaulted>
victim-address-range: 0.0.0.0-255.255.255.255 <defaulted>
attacker-port-range: 0-65535 <defaulted>
victim-port-range: 0-65535 <defaulted>
risk-rating-range: 0-100 <defaulted>
actions-to-remove: <defaulted>
filter-item-status: Enabled <defaulted>
stop-on-match: False <defaulted>
user-comment: <defaulted>
-----------------------------------------------
-----------------------------------------------
sensor(config-rul)#
About General Settings, page 6-15
Event Action Summarization, page 6-15
Event Action Aggregation, page 6-15
Deny Attackers, page 6-16
Configuring the General Settings, page 6-16
Clearing the Denied Attackers List, page 6-18
Chapter 6
to discard them.
no
Configuring Event Action Rules
78-16527-01