Excluding Internal IP addresses

Unanswered Question
Apr 3rd, 2008

I want to exclude some of my network's internal IP addresses as sources. This is a recommended action for some signatures fired on the AIP-SSM of my ASA.

Pls, how and from which of the devices do I exclude the IP addresses.

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
rhermes Thu, 04/03/2008 - 11:54

This has become a very popular question. These two threads are within the last 10 posts, but should be able to answer your question

Intrusion Prevention Systems/IDS: IPS - Event Action Filters. Which alerts do you supress -

http://forum.cisco.com/eforum/servlet/NetProf?page=netprof&forum=Security&topic=Intrusion%20Prevention%20Systems/IDS&CommCmd=MB%3Fcmd%3Ddisplay_location%26location%3D.2cbfcac9

Intrusion Prevention Systems/IDS: Tuning signature

http://forum.cisco.com/eforum/servlet/NetProf?page=netprof&forum=Security&topic=Intrusion%20Prevention%20Systems/IDS&CommCmd=MB%3Fcmd%3Ddisplay_location%26location%3D.2cc00fea

Actions

This Discussion