Solved

Cisco SSP-IPS40

Posted on 2011-09-26
4
561 Views
Last Modified: 2013-11-29
Is there any way to implement the inline IPS (C5585 / SSP-IPS40)and configure it to not-block or deny any traffic.
Basically I want to configure IPS inline and configure it not to deny any traffic just send alerts ONLY.
I know I can modify indvidual signatures however looking to do it smartly with some Global level configuration.
I would really appreciate urgent response.
0
Comment
Question by:tech2010
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
4 Comments
 
LVL 18

Expert Comment

by:jmeggers
ID: 36598498
Cisco's IPS products allow alert only as a response option. I haven't worked with the module you're mentioning but I would expect the same option.
0
 
LVL 18

Expert Comment

by:jmeggers
ID: 36598530
My response was not of much help, I'm sure. I'll check on the global change question.
0
 
LVL 1

Accepted Solution

by:
tech2012 earned 500 total points
ID: 36709412
Add Even Action Filter
leave it to default settings
click on actions to subtract
and exclude the actions you want to be excluded.(MUST NOT EXCLUDE Produce Alert).
Use event action override must be disabled.
0
 

Author Closing Comment

by:tech2010
ID: 36717793
well spot on.
0

Featured Post

Simplifying Server Workload Migrations

This use case outlines the migration challenges that organizations face and how the Acronis AnyData Engine supports physical-to-physical (P2P), physical-to-virtual (P2V), virtual to physical (V2P), and cross-virtual (V2V) migration scenarios to address these challenges.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

WARNING:   If you follow the instructions here, you will wipe out your VTP and VLAN configurations.  Make sure you have backed up your switch!!! I recently had some issues with a few low-end Cisco routers (RV325) and I opened a case with Cisco TA…
Powerful tools can do wonders, but only in the right hands.  Nowhere is this more obvious than with the cloud.
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, just open a new email message. In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
Exchange organizations may use the Journaling Agent of the Transport Service to archive messages going through Exchange. However, if the Transport Service is integrated with some email content management application (such as an antispam), the admini…

726 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question