I keep reading the NetPro postings and see that you can "tweak" signatures to be less sensitive or more sensitive. I have the CSPM database reporting signatures. Now, I would like to be able to tweak them or create new signatures based on my own knowledge. Is there a document out there that will show me how to do this? Also, is there a website out there with the latest strings that can be installed as an interim until the new signature update comes out?
Often times advanced configuration issues are best addressed in an interactive session with one of our trained technical assistance engineers. While other forum users may be able to help, its often difficult to do so for this type of issue.
When 3.1 is released the IDM (web based Intrusion Detection Device Manager) can also be used to tweak the signatures and create new ones.
As for a website showing the latest strings. There is not one. We release the signatures on a 2 week cycle for the appliance. We don't release the strings for these signatures prior to that because they are being constantly tweaked up until the release of the signature. In cases where a real bad attack has just been released, we will execute an emergency signature update that same day if possible. (The IDS Management Team determines if the attack is "bad" enough to require us to spend the extra effort to produce an emergency signature update.)
However, users are encouraged to generate their own custom signature updates. Some users have begun posting those custom signatures on this Net Pro Posting and would encourage you to do the same when you come up with some.
DocumentationCode download linksGoalRequirementLimitationsSupported ISR and UCS-E ModelSupported ISRG2 and UCS-E Blades:Supported ISR4K and UCS-E Blades:Step by Step ConfigurationConfigure one of the connectivity options to access the Cisco IMC from the n...
Firepower Threat Defense (NGFWv) on UCS E-series - Transparent Mode in HA
DocumentationCode download linksGoalRequirementLimitationsSupported ISR and UCS-E ModelSupported ISRG2 and UCS-E Blades:Supported ISR4K and UCS-E Blades:Step by Step ConfigurationCo...
I am currently unable to specify "crypto keyring" command when configuring VPN connection on my cisco 2901 router.
The following licenses have been activated on my router :