IPS - Signature definition - ASA - AIP-SSM

 

ASA AIP-SSM has one default signature definition sig0.

I recommend to create your own signature definitiion for normal operation work. It is good pracitise because:

1.you do not change default settings

2.in case of problems you can create new signature definition based on default signature definition sig0( on condition you never change its values)

3.new signature definition copy all its value from sig0 definition

 

CREATING SIGNATURE DEFINITION

 

(config)# service signature-definition danpol
Editing new instance danpol.

Apply Changes?[yes]: yes

 ASSIGNING SIGNATURE DEFINITION TO VIRTUAL SENSOR

 

(config)# service analysis-engine

(config-ana)# virtual-sensor danpol

(config-ana-vir)# signature-definition danpol

(config-ana-vir)# exit

(config-ana)# exit
Apply Changes?[yes]: yes

 

 

dzbanek 2013-03-02

This site uses cookies. Some of the cookies we use are essential for parts of the site to operate and have already been set. You may delete and block all cookies from this site, but parts of the site will not work.