Excluding Internal IP addresses

Unanswered Question
Apr 3rd, 2008
User Badges:

I want to exclude some of my network's internal IP addresses as sources. This is a recommended action for some signatures fired on the AIP-SSM of my ASA.


Pls, how and from which of the devices do I exclude the IP addresses.

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
rhermes Thu, 04/03/2008 - 11:54
User Badges:
  • Gold, 750 points or more

This has become a very popular question. These two threads are within the last 10 posts, but should be able to answer your question

Intrusion Prevention Systems/IDS: IPS - Event Action Filters. Which alerts do you supress -

http://forum.cisco.com/eforum/servlet/NetProf?page=netprof&forum=Security&topic=Intrusion%20Prevention%20Systems/IDS&CommCmd=MB%3Fcmd%3Ddisplay_location%26location%3D.2cbfcac9


Intrusion Prevention Systems/IDS: Tuning signature

http://forum.cisco.com/eforum/servlet/NetProf?page=netprof&forum=Security&topic=Intrusion%20Prevention%20Systems/IDS&CommCmd=MB%3Fcmd%3Ddisplay_location%26location%3D.2cc00fea

Actions

This Discussion