• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 578
  • Last Modified:

Cisco SSP-IPS40

Is there any way to implement the inline IPS (C5585 / SSP-IPS40)and configure it to not-block or deny any traffic.
Basically I want to configure IPS inline and configure it not to deny any traffic just send alerts ONLY.
I know I can modify indvidual signatures however looking to do it smartly with some Global level configuration.
I would really appreciate urgent response.
0
tech2010
Asked:
tech2010
  • 2
1 Solution
 
jmeggersSr. Network and Security EngineerCommented:
Cisco's IPS products allow alert only as a response option. I haven't worked with the module you're mentioning but I would expect the same option.
0
 
jmeggersSr. Network and Security EngineerCommented:
My response was not of much help, I'm sure. I'll check on the global change question.
0
 
tech2012Commented:
Add Even Action Filter
leave it to default settings
click on actions to subtract
and exclude the actions you want to be excluded.(MUST NOT EXCLUDE Produce Alert).
Use event action override must be disabled.
0
 
tech2010Author Commented:
well spot on.
0

Featured Post

What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now