IDS mailing list archives
Re: IDS CISCO alarm
From: Krystian Antoni <krystianantoni () gmail com>
Date: Fri, 7 Jan 2005 08:15:44 +0100
I'm not sure if I'm answering your question but here it goes : yes it is possible to configure Cisco IDS (talking abour IDS v 4.1.4), to filter out some events -> not create alarm events (its called Event filter). Filtering out alarms is done by configuring signature IDs, IP of source or/and destination. On Wed, 5 Jan 2005 18:41:29 -0300, Julio Crespo <jcrespo () sigfe cl> wrote:
Hi, someone knows if is configurable for send alarms the IDS CISCO ? I have looked for by all the site of Cisco without obtaining no reference As it is possible that a IDS does not have form to alarm? it is necessary to be patch to log that it gives product IDS Event Viewer? Thanks a lot. -------------------------------------------------------------------------- Test Your IDS Is your IDS deployed correctly? Find out quickly and easily by testing it with real-world attacks from CORE IMPACT. Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 to learn more. --------------------------------------------------------------------------
-------------------------------------------------------------------------- Test Your IDS Is your IDS deployed correctly? Find out quickly and easily by testing it with real-world attacks from CORE IMPACT. Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 to learn more. --------------------------------------------------------------------------
Current thread:
- IDS CISCO alarm Julio Crespo (Jan 06)
- Re: IDS CISCO alarm Krystian Antoni (Jan 08)
- RE: IDS CISCO alarm Gary Halleen (ghalleen) (Jan 10)
- <Possible follow-ups>
- RE: IDS CISCO alarm Arndt . WA (Jan 08)
- RE: IDS CISCO alarm Phil Hollows (Jan 12)