Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

cannot view or modify IOS IPS signatures

what could be wrong with my config? i managed update my IOS IPS with the latest signature definition file to S291.0 and i cant seem to see the signatures or even modify them.

part of my config below:

ip ips config location flash:/ipsstore/ retries 1

ip ips notify SDEE

ip ips name sdm_ips_rule

!

ip ips signature-category

category all

retired true

category ios_ips basic

retired false

!

crypto key pubkey-chain rsa

named-key realm-cisco.pub

key-string

30820122 300D0609 2A864.....

2 REPLIES
Silver

Re: cannot view or modify IOS IPS signatures

After selecting a pretuned SDF file for a router, you can do additional signature tuning tasks. You can add, edit, delete, and modify signatures to best fit your needs, or you can even create your own signatures when necessary. The following gives an example of how to add additional signatures and modify the actions using IPS MC. Select the device or device groups you want to configure, and then go to Settings->Signatures->IOS IPS.

http://www.cisco.com/en/US/products/ps6634/products_white_paper0900aecd8043bc07.shtml

New Member

Re: cannot view or modify IOS IPS signatures

i cant add, edit, delete or even modify the signatures. kinda weired but i see IPS events happening on the monitor tab.

171
Views
1
Helpful
2
Replies