I have IPS 4260 configured in promiscuous mode.
IPS is sensing the internet traffic towards my network.
Now i m getting so mnay alarms HIGH, LOW and medium. I want to get minimum alarm about different signature.
Kindly tell me how to configure alarm summary so that during specific time I will get only few alarms when one single signature trigger.
Also I am having problem in blocking. I have configured the action on specific signature to block the source IP address, but still i m getting alarm of that signature and still the IP is triggering the alarm. I also not able to see Block network or hosts in IPS monitoring window.
Kindly guide how to configure IPs for following things.
Waiting for reply