Cisco Systems CL-28826-01 Security Camera User Manual


  Open as PDF
of 2616
 
38-5
User Guide for Cisco Security Manager 4.4
OL-28826-01
Chapter 38 Defining IPS Signatures
Configuring Signatures
Understanding Signature Inheritance, page 38-3
Enabling and Disabling Signatures, page 38-10
Cloning Signatures, page 38-18
Editing Signature Parameters (Tuning Signatures), page 38-19
Configuring Event Action Filters, page 39-4
Chapter 39, “Configuring Event Action Rules”
Field Reference
Table 38-1 Signature Policy
Element Description
ID The signature ID, which is the unique numerical value assigned to this
signature. This value lets the sensor identify a particular signature.
Click the ID number to open a page in your web browser with detailed
information about the signature, as explained in Obtaining Detailed
Information About a Signature, page 38-2.
Sub The subsignature ID, which is the unique numerical value assigned to
this subsignature. A Subsignature ID identifies a more granular version
of a broad signature.
Name The name assigned to the signature.
Action The actions the sensor takes when this signature fires.
Severity The severity level that the signature reports: High, Medium, Low, or
Informational.
Fidelity The weight associated with how well this signature might perform in
the absence of specific knowledge of the target.
Source The lowest policy in the inheritance hierarchy that overrides the
settings for a signature. Values can be:
Default—The signature uses the default Cisco-defined settings.
Local—The signature is defined specifically for the selected device
(Device view only.)
Policy name—The lowest shared policy in the inheritance
hierarchy. You can see policy names in Policy view, or in Device
view if you assign a shared signature policy to the device.
Enabled Whether the signature is enabled in this policy; true signifies that it is
enabled, false that it is disabled. A signature must be enabled for the
sensor to protect against the traffic specified by the signature.
Base Risk Rating The base risk rating value of the signature.