cannot view or modify IOS IPS signatures

Unanswered Question
Sep 10th, 2007

what could be wrong with my config? i managed update my IOS IPS with the latest signature definition file to S291.0 and i cant seem to see the signatures or even modify them.

part of my config below:

ip ips config location flash:/ipsstore/ retries 1

ip ips notify SDEE

ip ips name sdm_ips_rule

!

ip ips signature-category

category all

retired true

category ios_ips basic

retired false

!

crypto key pubkey-chain rsa

named-key realm-cisco.pub

key-string

30820122 300D0609 2A864.....

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 1 (1 ratings)
Loading.
aghaznavi Fri, 09/14/2007 - 13:00

After selecting a pretuned SDF file for a router, you can do additional signature tuning tasks. You can add, edit, delete, and modify signatures to best fit your needs, or you can even create your own signatures when necessary. The following gives an example of how to add additional signatures and modify the actions using IPS MC. Select the device or device groups you want to configure, and then go to Settings->Signatures->IOS IPS.

http://www.cisco.com/en/US/products/ps6634/products_white_paper0900aecd8043bc07.shtml

brianbono Fri, 09/14/2007 - 19:46

i cant add, edit, delete or even modify the signatures. kinda weired but i see IPS events happening on the monitor tab.

Actions

This Discussion