How can I ignore Signature ID 6402?

whiteford · ‎10-06-2009

Hi,

We have an ASA with the IPS module, how can I ignore signature ID 6402 completely?

mdreelan · ‎10-06-2009

Depending on the version of IPS software you are running, you can login to the IPS (IME, or directly) and disable that signature.

mkharban · ‎10-06-2009

Hi,

In case you would like to disable a signature for some particular traffic try creating event action filter for the same.

Please find below the link explaining how it is done:

I hope this helps.

Thanks,

Manish Kharbanda