cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
397
Views
1
Helpful
2
Replies

cannot view or modify IOS IPS signatures

brianbono
Level 1
Level 1

what could be wrong with my config? i managed update my IOS IPS with the latest signature definition file to S291.0 and i cant seem to see the signatures or even modify them.

part of my config below:

ip ips config location flash:/ipsstore/ retries 1

ip ips notify SDEE

ip ips name sdm_ips_rule

!

ip ips signature-category

category all

retired true

category ios_ips basic

retired false

!

crypto key pubkey-chain rsa

named-key realm-cisco.pub

key-string

30820122 300D0609 2A864.....

2 Replies 2

aghaznavi
Level 5
Level 5

After selecting a pretuned SDF file for a router, you can do additional signature tuning tasks. You can add, edit, delete, and modify signatures to best fit your needs, or you can even create your own signatures when necessary. The following gives an example of how to add additional signatures and modify the actions using IPS MC. Select the device or device groups you want to configure, and then go to Settings->Signatures->IOS IPS.

http://www.cisco.com/en/US/products/ps6634/products_white_paper0900aecd8043bc07.shtml

i cant add, edit, delete or even modify the signatures. kinda weired but i see IPS events happening on the monitor tab.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Review Cisco Networking products for a $25 gift card