Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
Step-by-Step Configuration and Troubleshooting Best Practices for the NGFW, NGIPS and AMP Technologies A Visual Guide to the Cisco Firepower Threat Defense (FTD)
Community Member

Signature Actions on IPS 4240

If a default action on a specific signature is configured to "produce alert" only, why is it that the IPS will also Log packet from the attacker? I would have thought that this would have required that the action "Log attacker packets" be selected as well.

1 REPLY
Community Member

Re: Signature Actions on IPS 4240

Use the Installing and Using Cisco Intrusion Prevention System Manager Express 6.1 Configuring Policies and Cisco 4240-DC Intrusion Prevention Sensor guide.

http://www.cisco.com/en/US/prod/collateral/vpndevc/ps5729/ps5713/ps4077/ps5768/prod_bulletin0900aecd8030c5da.html

http://www.cisco.com/en/US/docs/security/ips/6.1/configuration/guide/ime/ime_policies.html

353
Views
0
Helpful
1
Replies
CreatePlease to create content