IPS anomaly detection knowledge base

[nika.katsitadze]

Hello

i have configured my IPS device anomaly detection policy for learning accept mode for 48 hours.

and after finishing learning i see knowledge base file which is only 88 bytes in size. Is this normal ?  

[haivrajesh]

Depending on your network complexity, you may want to have anomaly detection in learning accept mode for longer than the default 24 hours Yes  the knowledge base will replace with new knowledge base.

Regards

Rajeswar