×

Warning message

  • Cisco Support Forums is in Read Only mode while the site is being migrated.
  • Cisco Support Forums is in Read Only mode while the site is being migrated.

OS classification of signatures

Unanswered Question
May 22nd, 2003
User Badges:

Has anyone gone through and classified the signatures by Operating System (perhaps even patch level). I understand that not all signatures would fall into such a category (Host scanning sigs being an example) but the information is very useful if you can drop alarms that do not apply to your environment.


We are looking to run the gambit and classify the sigs but I am hoping that it has already been done :)


thanks,

Geoff

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
stleary Fri, 05/23/2003 - 07:26
User Badges:
  • Cisco Employee,

IDM 4.0 categorizes signatures by operating system.

You can enable or disable signatures within each

operating system category.

gpoer Fri, 05/23/2003 - 08:54
User Badges:

How can I dump that information?


Is it accessable with RDEP? If so do you know what the schema would be?


thanks, geoff

Actions

This Discussion