Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Community Member

any way to batch enable shunning on signatures?

Hello,

Does anyone have any suggestions for a way to enable shunning on muliple signatures at once other than by going through them all one at a time (say to enable shunning on all 'High' serverity level sigs). any suggestions are appreciated!

1 REPLY
Cisco Employee

Re: any way to batch enable shunning on signatures?

IDM supports batch updating of the shunning parameter (EventAction) for signatures within an engine.

To use this feature, click Configuration/Sensing Engine/Signature Configuration Mode/Engines.

Select one of the engines. Then select the checkboxes for all of the high severity signatures and click the Edit button.

89
Views
10
Helpful
1
Replies
CreatePlease to create content