IPS Sweep Engine

Answered Question
Jun 21st, 2007
User Badges:

Referring to engine type sweep specifically signature 3030. Signature 3030 uses the sweep engine. The default unique value is 15. What is the time component of the sweep engine? There has to be a time component otherwise you would have sig 3030 firing all the time (15 events per hour...triggers an alarm).

Correct Answer by scothrel about 9 years 10 months ago

There is a 5 second inactivity timeout.

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.
Correct Answer
scothrel Thu, 06/21/2007 - 11:44
User Badges:
  • Cisco Employee,

There is a 5 second inactivity timeout.

rmeans Thu, 06/21/2007 - 12:04
User Badges:

Is it possible to change the 5 second timeout?

scothrel Fri, 06/22/2007 - 07:25
User Badges:
  • Cisco Employee,

Not on the current version...but you've got the engineers thinking about why there isn't a knob and what it would take to add one.

Actions

This Discussion