Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

CSS11000 - NIMDA filters

I have created appropriate filters (according to Cisco's Document) that filter the NIMDA virus. Although it works for REQUESTS that come to IPs that haven't got a Content Rule defined it DOES NOT work for IPs that have a CONTENT RULE associated with it. WHY?

Any help will be appreciated.

Cisco Employee

Re: CSS11000 - NIMDA filters

because for any routing device, they prefer to use the most specific information.

So, you need another content rule to block nimda virus for each ip which already have their own content rule.

New Member

Re: CSS11000 - NIMDA filters

Can you be more specific .... perhaps you could show us a quick content rule config that applies to the above-mentioned scenario ...

Thanking you in advance,


New Member

Re: CSS11000 - NIMDA filters

I had the same problem, what we did was to use a filter on the internet router using policies. I tried with 3 different versions of Operating System on the CSS and it did not work. I think there is something missing on the document or something that has to be known before applying the filters.