IPS inline mode - Log only

Tauer Drumond · ‎04-01-2010

Hi all,

I have a CISCO 4240 IPS.

I'd like put it on the network in inline mode, but I'd like it doesn't take any action, neither with signatures or anomaly detect.

I just want it log the events when a signature is fired or a anomaly detect threshold is reachen

Is this possible?

I dont wanna use it in promiscuous mode.

Thanks in advanced

Tauer

Jennifer Halim · ‎04-02-2010

What you are trying to achieve is essentially promiscuous mode, not too sure what is the difference with in-line mode when you disable the "deny" or "drop" actions.