Excluding Internal IP addresses

ayolawrence · ‎04-03-2008

I want to exclude some of my network's internal IP addresses as sources. This is a recommended action for some signatures fired on the AIP-SSM of my ASA.

Pls, how and from which of the devices do I exclude the IP addresses.

rhermes · ‎04-03-2008

This has become a very popular question. These two threads are within the last 10 posts, but should be able to answer your question

Intrusion Prevention Systems/IDS: IPS - Event Action Filters. Which alerts do you supress -

http://forum.cisco.com/eforum/servlet/NetProf?page=netprof&forum=Security&topic=Intrusion%20Prevention%20Systems/IDS&CommCmd=MB%3Fcmd%3Ddisplay_location%26location%3D.2cbfcac9

Intrusion Prevention Systems/IDS: Tuning signature

http://forum.cisco.com/eforum/servlet/NetProf?page=netprof&forum=Security&topic=Intrusion%20Prevention%20Systems/IDS&CommCmd=MB%3Fcmd%3Ddisplay_location%26location%3D.2cc00fea