Cisco OL-4015-08 User Manual page 424

Import Signatures
Signatures
Signature Tree
Total [ n ] New [ n ] Deleted [ n ]
Select All
Add
Cisco Router and Security Device Manager Version 2.2 User's Guide
19-42
This window lets you view the configured IPS signatures on the router. You can
add customized signatures, or import signatures from Cisco.com-downloaded
Signature Definition Files (SDF). You can also edit, delete, enable, and disable
signatures.
IPS is shipped with an SDF that contains a number of signatures that your router
can accommodate. To learn more about the SDF shipped with IPS, and how to
have IPS use it, click IPS-Supplied Signature Definition
The signature tree enables you to filter the signature list on the right according to
the type of signature that you want to view. First choose the branch for the general
type of signature that you want to display. The signature list displays the
configured signatures for the type that you chose. If a plus (+) sign appears to the
left of the branch, there are subcategories that you can use to refine the filter. Click
on the + sign to expand the branch and then select the signature subcategory that
you want to display. If the signature list is empty, there are no configured
signatures available for that type.
Example: If you want to display all attack signatures, click the Attack branch
folder. If you want to see the subcategories that you can use to filter the display
of attack signatures, click the + sign next to the Attack folder. If you want to see
Denial of Service (DoS) signatures, click the DoS folder.
This text gives you the count of new signatures and deleted signatures.
Click to select all signatures in the list.
Click Add if you want to do any of the following:
Clone—The clone option is enabled if one signature is selected that does not
•
belong to a hardcoded engine. It is disabled if the signature uses one of the
IOS hardcoded engines.
Chapter 19 Intrusion Prevention System
Files.
OL-4015-08