I am currently running Cisco IPS 4260, CS-MARS v4.2, and CSM 3.1.0.
I want to create a custom signature in all my IPS 4260's which monitor activity from and to several external IP addresses and have it send an alert to my MARS device. How can I do this and how can I deploy the new custom signature to all my sensors?