I have a CISCO 4240 IPS.
I'd like put it on the network in inline mode, but I'd like it doesn't take any action, neither with signatures or anomaly detect.
I just want it log the events when a signature is fired or a anomaly detect threshold is reachen
Is this possible?
I dont wanna use it in promiscuous mode.
Thanks in advanced