Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
Step-by-Step Configuration and Troubleshooting Best Practices for the NGFW, NGIPS and AMP Technologies A Visual Guide to the Cisco Firepower Threat Defense (FTD)
ovt Bronze
Bronze

Simple IPS Normalizer question :) Sig 1301/1304, IDS 6.0(3)

Why don't signatures 1301 and 1304 produce alert even if "Produce Alert" event-action is specified for those signatures (promisc. mode)?

Is it possible to send RST or shun a connection in promisc. mode when those signatures fire?

1 REPLY
Silver

Re: Simple IPS Normalizer question :) Sig 1301/1304, IDS 6.0(3)

There are certain parameters to be configured and checked if don't see an alert. Refer URL

http://cisco.com/en/US/docs/security/ips/5.0/configuration/guide/idm/dmts.html#wp1033

281
Views
0
Helpful
1
Replies
CreatePlease to create content