IPS inline mode - Log only

Unanswered Question
Apr 1st, 2010

Hi all,

I have a CISCO 4240 IPS.

I'd like put it on the network in inline mode, but I'd like it doesn't take any action, neither with signatures or anomaly detect.

I just want it log the events when a signature is fired or a anomaly detect threshold is reachen

Is this possible?

I dont wanna use it in promiscuous mode.

Thanks in advanced

Tauer

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
Jennifer Halim Fri, 04/02/2010 - 00:38

What you are trying to achieve is essentially promiscuous mode, not too sure what is the difference with in-line mode when you disable the "deny" or "drop" actions.

Actions

This Discussion