Tuning Signature 3030

[jfermo]

I am seeing a lot of hits on signature 3030 on ports 139, 445 and 80. How can I exclude port 80? Is it possible to have two ports on PortOfInterest when I edit this signature?

I am using IDS4235 - S55.

Thanks.

[lwierenga]

This link should help you in tuning signatures:

http://www.cisco.com/en/US/products/sw/cscowork/ps3990/products_user_guide_chapter09186a0080157f9f.html