Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

How to quickly shun only selected signatures on 4235

Please;

There is a batch/(not one-to-one) way to disable the "shunning" on all signatures and enable this only for the signatures that I need to shun ?

1 REPLY
Cisco Employee

Re: How to quickly shun only selected signatures on 4235

By default the sensor is not configured to shun any signatures.

If you have not configured any signatures for shunning as of yet, then shunning is already disabled on all the signatures.

You just need to go and turn on shunning for the signatures you want it turned on for.

If you already configured shunning for multiple signatures but don't want shunning on those signatures anymore, then you can do one of 2 things:

1)Manually go back to each signature and turn it back off.

Or 2) Set all of the signatures back to their default settings which has shunning disabled. IDM as well as most of the configuration tools have an option for setting the signatures back to their default settings. (NOTE: this will change all tunings including severity settings back to their default settings so only do this if you don't mind losing your other tunings).

92
Views
0
Helpful
1
Replies
CreatePlease login to create content