Solved

Cisco SSP-IPS40

Posted on 2011-09-26
4
552 Views
Last Modified: 2013-11-29
Is there any way to implement the inline IPS (C5585 / SSP-IPS40)and configure it to not-block or deny any traffic.
Basically I want to configure IPS inline and configure it not to deny any traffic just send alerts ONLY.
I know I can modify indvidual signatures however looking to do it smartly with some Global level configuration.
I would really appreciate urgent response.
0
Comment
Question by:tech2010
  • 2
4 Comments
 
LVL 18

Expert Comment

by:jmeggers
ID: 36598498
Cisco's IPS products allow alert only as a response option. I haven't worked with the module you're mentioning but I would expect the same option.
0
 
LVL 18

Expert Comment

by:jmeggers
ID: 36598530
My response was not of much help, I'm sure. I'll check on the global change question.
0
 
LVL 1

Accepted Solution

by:
tech2012 earned 500 total points
ID: 36709412
Add Even Action Filter
leave it to default settings
click on actions to subtract
and exclude the actions you want to be excluded.(MUST NOT EXCLUDE Produce Alert).
Use event action override must be disabled.
0
 

Author Closing Comment

by:tech2010
ID: 36717793
well spot on.
0

Featured Post

Free eBook: Backup on AWS

Everything you need to know about backup and disaster recovery with AWS, for FREE!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Many businesses neglect disaster recovery and treat it as an after-thought. I can tell you first hand that data will be lost, hard drives die, servers will be hacked, and careless (or malicious) employees can ruin your data.
Ransomware is a malware that is again in the list of security  concerns. Not only for companies, but also for Government security and  even at personal use. IT departments should be aware and have the right  knowledge to how to fight it.
how to add IIS SMTP to handle application/Scanner relays into office 365.
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, just open a new email message. In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…

756 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question