Cisco SSP-IPS40

Is there any way to implement the inline IPS (C5585 / SSP-IPS40)and configure it to not-block or deny any traffic.
Basically I want to configure IPS inline and configure it not to deny any traffic just send alerts ONLY.
I know I can modify indvidual signatures however looking to do it smartly with some Global level configuration.
I would really appreciate urgent response.
Who is Participating?

Improve company productivity with a Business Account.Sign Up

tech2012Connect With a Mentor Commented:
Add Even Action Filter
leave it to default settings
click on actions to subtract
and exclude the actions you want to be excluded.(MUST NOT EXCLUDE Produce Alert).
Use event action override must be disabled.
jmeggersSr. Network and Security EngineerCommented:
Cisco's IPS products allow alert only as a response option. I haven't worked with the module you're mentioning but I would expect the same option.
jmeggersSr. Network and Security EngineerCommented:
My response was not of much help, I'm sure. I'll check on the global change question.
tech2010Author Commented:
well spot on.
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.