About Tim Armstrong

Tim Armstrong · 09-22-2008

I'd like to apply a consistent signature policy across several routers using IOS IPS and managed by a Cisco Security Manager. I've created the new Policy, and the signatures are setup in a default manner. I'd like to perform the equivalent of the '...

Tim Armstrong · 03-21-2007

I have an IPS4215 installed behind a 515E firewall. When clients use the Cisco VPN Client to connect to the firewall (and access a sensitive server behind it) I get multiple hits on Sig 1300/0 TCP Segment Overwrite. Summarization keeps the number o...

Tim Armstrong · 07-30-2010

I submitted a TAC case on this point a couple of years ago and was told that the rule can be set per device but not per port. The kind engineer promised to send the idea to product development for possible inclusion in a future release, but I don't ...

Tim Armstrong · 10-05-2007

I don't know about your screenshots, but...We recently implemented the 5.x signature style to a 2821 router and drove cpu utilization to 100%. It turned out that by default all of the available signatures were enabled, and the router can't handle th...

Tim Armstrong · 03-23-2007

Hi,Since I'm not the only one with the problem, I'll try to open a TAC today and see where this goes. I'll post progress here.Thanks for the reply!

Member Since	‎03-21-2007 04:28 AM
Date Last Visited	‎04-03-2018 02:32 PM
Posts	8

User Statistics

User Activity

CSM Signature Policy

TCP Segment Overwrite

Re: Customising data link up/down rule

Re: IPS messages on a 2811 router

Re: TCP Segment Overwrite