Filter
Top Products
Contents
xxxiv
User Guide for Cisco Security Manager 4.4
OL-28826-01
Enabling and Disabling Signatures 38-10
Editing Signatures 38-11
Edit Signature or Add Custom Signature Dialog Boxes 38-12
Adding Custom Signatures 38-16
Engine Options 38-17
Cloning Signatures 38-18
Editing Signature Parameters (Tuning Signatures) 38-19
Edit Signature Parameters Dialog Box 38-21
Editing the Component List for Meta Engine Signatures 38-25
Obsoletes Dialog Box 38-26
Configuring Signature Settings 38-27
CHAPTER
39 Configuring Event Action Rules 39-1
Understanding the IPS Event Action Process 39-1
Understanding IPS Event Actions 39-2
Configuring Event Action Filters 39-4
Tips for Managing Event Action Filter Rules 39-6
Event Action Filters Page 39-7
Filter Item Dialog Box 39-9
Configuring Event Action Overrides 39-13
Event Action Override Dialog Box 39-14
Configuring IPS Event Action Network Information 39-14
Configuring Target Value Ratings 39-15
Target Value Rating Dialog Box 39-16
Understanding Passive OS Fingerprinting 39-17
Configuring OS Identification (Cisco IPS 6.x and Later Sensors Only) 39-18
OS Map Dialog Box 39-20
Configuring Settings for Event Actions 39-21
CHAPTER
40 Managing IPS Anomaly Detection 40-1
Understanding Anomaly Detection 40-1
Worm Viruses 40-2
Anomaly Detection Modes 40-2
Anomaly Detection Zones 40-3
Knowing When to Turn Off Anomaly Detection 40-4
Configuring Anomaly Detection Signatures 40-4
Configuring Anomaly Detection 40-6
Configuring Anomaly Detection Learning Accept Mode 40-8