Filter
Top Products
38-8
User Guide for Cisco Security Manager 4.4
OL-28826-01
Chapter 38 Defining IPS Signatures
Configuring Signatures
Edit, Add, Replace Action Dialog Boxes
Use the Edit, Add, or Replace Action dialog boxes to change the actions defined for a signature. These
dialog boxes are available only when you edit the Action cell using the right click menu as explained in
Signature Shortcut Menu, page 38-7. The behavior differs depending on the dialog box name:
• Add Actions—The actions that you select are added to those already defined in the signature. To
open this dialog box, right-click the Actions cell of a signature and select Add to Actions > More.
Enable, Disable Places the signature in the enabled or disabled state, respectively.
Disabled signatures appear with crosshatching over them. For more
information, see Enabling and Disabling Signatures, page 38-10.
Show Events Enables navigation to the Cisco Security MARS application to view the
realtime or historical events detected by the selected signature. For
more information, see Viewing CS-MARS Events for an IPS Signature,
page 69-30.
Action Cell Commands
Add to Actions Adds an action to the current list of actions for the selected signature.
Delete from Actions Deletes an action from the current list of actions for the selected
signature.
Replace Actions With Replace the current set of actions for the selected signature with the
single action selected. If you want to select more than one action, select
More from the submenu, then use Ctrl+click to select the desired
actions.
Edit Actions Opens the Edit Actions dialog box, where you can select the desired
actions for the signature. Your selection replaces the current list of
actions for the signature. For more information, see Edit, Add, Replace
Action Dialog Boxes, page 38-8.
Severity Cell Commands
•
High
• Medium
• Low
• Informational
Changes the severity level of the signature to the level you select.
Fidelity Cell Commands
Edit Fidelity Changes the fidelity rating of the signature, which is the weight
associated with how well this signature might perform in the absence
of specific knowledge of the target.
Retired Cell Commands
• Retire
• Activate
• Retire on Low Memory
• Retire on Medium
Memory
Changes the retired status of the signature to the selected status. For
more information about the retired status categories, see Edit Signature
or Add Custom Signature Dialog Boxes, page 38-12.
Table 38-2 Signature Shortcut Menu (Continued)
Menu Command Description