Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Community Member

What should be a high alert on CSPM 2.3.3i?

Is there a list on what signatures should be classified as a high alert?

3 REPLIES
Community Member

Re: What should be a high alert on CSPM 2.3.3i?

There is an appendix (G) in the back of Cisco Secure Intrusion Detection System from Cisco Press that covers recommended alarm levels.

Community Member

Re: What should be a high alert on CSPM 2.3.3i?

Thank you for your reply, but that list is a little outdated.

Community Member

Re: What should be a high alert on CSPM 2.3.3i?

A brand new sensor comes with signatures set at the recommended level. The previous reply certainly satisfies your question if you've done customization to your signature set.

96
Views
0
Helpful
3
Replies
CreatePlease to create content