Filter
Top Products
Chapter 27 Cisco IOS IPS
Edit IPS
27-52
Cisco Router and Security Device Manager 2.5 User’s Guide
OL-4015-12
You can make changes to the imported signatures before deploying them.
Signatures that set to import and are identical to deployed signatures will not be
imported. If all imported signatures are identical to deployed signatures, then the
Apply Changes button is disabled.
Signature Tree
If you need a description of the signature tree, click this link: Signature Tree. You
can use the signature tree in this window to assemble the signatures that you want
to import, category by category.
For example: you may want to add signatures from the OS category, and from the
Service category. You can do this by choosing the OS branch of the tree, and any
branch from that part of the tree that you want, such as the UNIX branch or the
Windows branch. When the types of signatures that you want to import are
displayed, you can make your selections in the signature list area. Then you can
choose the Service branch, and choose any of the service signatures that you want.
View By and Criteria List
The View By and Criteria list boxes enable you to filter the display according to
the types of signatures that you want to view. First choose the criteria in the View
By list, then choose the value for that criteria in the list to the right (the criteria
list).
For example: If you choose Engine in the View By list, the criteria list is labeled
Engine, and you can choose among the available engines, such as Atomic.ICMP,
and Service.DNS.
If you choose Sig ID, or Sig Name, you must enter a value in the criteria list.
Signature List Area
The signature list displays the signatures available in the SDF based on the criteria
you chose in the signature tree. The text of signatures already found on the target
router is blue.
The signature list area has these columns:
• Sig ID—Unique numerical value assigned to this signature. This value allows
Cisco IOS IPS to identify a particular signature.