Chapter 19
Intrusion Prevention System
Signatures marked for deletion
OL-4015-08
Icons
Signature is present in Router configuration and enabled.
Signature is present in router configuration but not active.
Signature status has changed in SDM, and awaits delivery to
router.
Right-click Context Menu
If you right-click a signature, SDM displays a context menu with the following
options:
Actions—Click to select the actions to be taken when the signature is
•
matched. See
Assign Actions
Set Severity to—Click to set the severity level of a signature to: high,
•
medium, low, or informational
Restore Defaults—Click to restore the signature's default values
•
Remove Filter—Click to remove a filter applied to the signature.
•
NSDB help (need CCO account)—Click to display help on the Network
•
Security Data Base (NSDB).
This area is visible when the Details button is clicked. It lists the signatures that
you deleted from the Signature List. Signatures marked for deletion remain active
in IPS configuration until you click Apply Changes. If you exit the Signatures
window and disable IPS, the marked signatures will be deleted if IPS is
re-enabled.
Undelete All button
Click this button if you want to restore all signatures in the signatures marked
deleted list.
Undelete button
Click to restore selected signatures marked for deletion. When clicked the
signatures are unmarked, and returned to the list of active signatures.
Cisco Router and Security Device Manager Version 2.2 User's Guide
for more information.
Import Signatures
19-45