Filter
Top Products
38-13
User Guide for Cisco Security Manager 4.4
OL-28826-01
Chapter 38 Defining IPS Signatures
Configuring Signatures
Field Reference
Table 38-4 Edit Signature or Add Custom Signature Dialog Boxes
Element Description
Source Policy
(Edit signature only.)
The policy in which you are editing the signature:
• Default—The default Cisco-defined signature, which you cannot
edit. You must select something other than Default to edit the
signature.
• Local—The signature is a local signature defined specifically for
the selected device. This option is not available in Policy view.
• Policy name (variable)—The name of a shared policy. In Device
view, a policy name is available only if you assign a shared policy
to the device. In Policy view, this is the name of the policy you are
editing. Select the policy name to edit the signature and to have
your edits reflected on all devices that are assigned the shared
policy.
Name
(Add only.)
The name of the signature.
You cannot change the name after you create the signature. If you want
to change the name, you must create a clone of the signature.
SigID
(Add only.)
The signature ID that you specify while adding a custom signature.
The allowed range of values is 60000 - 65000.
SubSigID
(Add only.)
The subsignature ID that you specify while adding a custom signature.
The allowed range of values is 0 - 255.
Inheritance Mandatory
(Edit signature only.)
When selected, forces any policy that inherits from this policy to use
the signature settings defined.
Enabled Whether the signature is enabled.
Severity The severity level that the signature will report: High, Medium, Low, or
Informational.
Fidelity Rating The weight associated with how well this signature might perform in
the absence of specific knowledge of the target.
Actions The actions that the sensor will take when this signature fires. For a
complete list of actions, see the Understanding IPS Event Actions,
page 39-2.
Use Ctrl+click to select multiple actions.