Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people, just like you, are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
Solved

Cisco SSP-IPS40

Posted on 2011-09-26
4
541 Views
Last Modified: 2013-11-29
Is there any way to implement the inline IPS (C5585 / SSP-IPS40)and configure it to not-block or deny any traffic.
Basically I want to configure IPS inline and configure it not to deny any traffic just send alerts ONLY.
I know I can modify indvidual signatures however looking to do it smartly with some Global level configuration.
I would really appreciate urgent response.
0
Comment
Question by:tech2010
  • 2
4 Comments
 
LVL 18

Expert Comment

by:jmeggers
ID: 36598498
Cisco's IPS products allow alert only as a response option. I haven't worked with the module you're mentioning but I would expect the same option.
0
 
LVL 18

Expert Comment

by:jmeggers
ID: 36598530
My response was not of much help, I'm sure. I'll check on the global change question.
0
 
LVL 1

Accepted Solution

by:
tech2012 earned 500 total points
ID: 36709412
Add Even Action Filter
leave it to default settings
click on actions to subtract
and exclude the actions you want to be excluded.(MUST NOT EXCLUDE Produce Alert).
Use event action override must be disabled.
0
 

Author Closing Comment

by:tech2010
ID: 36717793
well spot on.
0

Featured Post

Does Powershell have you tied up in knots?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Knowing where your website is hosted is as important as the features you receive, the monthly fee, and the support you receive. Due diligence should be done when choosing your next hosting provider.
The related questions "How do I recover the passwords for my Q-See DVR" and "How can I reset my Q-See DVR to eliminate a password" are seen several times a week.  Here we discuss the grim reality of the situation.
To show how to generate a certificate request in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.:  First we need to log into the Exchange Admin Center. Navigate to the Servers >> Certificates…
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, Just open a new email message.  In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…

809 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question