cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
315
Views
0
Helpful
1
Replies

Custom Signature for Active Watch LIst

jguirola03
Level 1
Level 1

I am currently running Cisco IPS 4260, CS-MARS v4.2, and CSM 3.1.0.

I want to create a custom signature in all my IPS 4260's which monitor activity from and to several external IP addresses and have it send an alert to my MARS device. How can I do this and how can I deploy the new custom signature to all my sensors?

1 Reply 1

chickman
Level 1
Level 1

You can create a share policy within CSM. This will allow you to modify your signatures enterprise wide.

Review Cisco Networking products for a $25 gift card