10-06-2009 07:21 AM - edited 03-10-2019 04:47 AM
Hi,
We have an ASA with the IPS module, how can I ignore signature ID 6402 completely?
10-06-2009 08:48 AM
Depending on the version of IPS software you are running, you can login to the IPS (IME, or directly) and disable that signature.
10-06-2009 08:51 AM
In case you would like to disable a signature for some particular traffic try creating event action filter for the same.
Please find below the link explaining how it is done:
https://www.cisco.com/en/US/products/sw/secursw/ps2113/products_tech_note09186a00808518b2.shtml
I hope this helps.
Thanks,
Manish Kharbanda
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:
