?
Solved

Cisco SSP-IPS40

Posted on 2011-09-26
4
Medium Priority
?
566 Views
Last Modified: 2013-11-29
Is there any way to implement the inline IPS (C5585 / SSP-IPS40)and configure it to not-block or deny any traffic.
Basically I want to configure IPS inline and configure it not to deny any traffic just send alerts ONLY.
I know I can modify indvidual signatures however looking to do it smartly with some Global level configuration.
I would really appreciate urgent response.
0
Comment
Question by:tech2010
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
4 Comments
 
LVL 18

Expert Comment

by:jmeggers
ID: 36598498
Cisco's IPS products allow alert only as a response option. I haven't worked with the module you're mentioning but I would expect the same option.
0
 
LVL 18

Expert Comment

by:jmeggers
ID: 36598530
My response was not of much help, I'm sure. I'll check on the global change question.
0
 
LVL 1

Accepted Solution

by:
tech2012 earned 2000 total points
ID: 36709412
Add Even Action Filter
leave it to default settings
click on actions to subtract
and exclude the actions you want to be excluded.(MUST NOT EXCLUDE Produce Alert).
Use event action override must be disabled.
0
 

Author Closing Comment

by:tech2010
ID: 36717793
well spot on.
0

Featured Post

Need protection from advanced malware attacks?

Look no further than WatchGuard's Total Security Suite, providing defense in depth against today's most headlining attacks like Petya 2.0 and WannaCry. Keep your organization out of the news with protection from known and unknown threats.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

With the rising number of cyber attacks in recent years, keeping your personal data safe has become more important than ever. The tips outlined in this article will help you keep your identitfy safe.
I don't pretend to be an expert at this, but I have found a few things that are useful. I hope that sharing them here will help others, so they will not have to face some rather hard choices. Since I felt this to be a topic of enough importance and…
The video tutorial explains the basics of the Exchange server Database Availability groups. The components of this video include: 1. Automatic Failover 2. Failover Clustering 3. Active Manager
Both in life and business – not all partnerships are created equal. Spend 30 short minutes with us to learn:   • Key questions to ask when considering a partnership to accelerate your business into the cloud • Pitfalls and mistakes other partners…
Suggested Courses

764 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question