Cisco ROUTER-SDM-CD User Manual page 654

Edit IPS
Edit IPS: Signatures
Signature Tree
Import Button
Cisco Router and Security Device Manager 2.5 User's Guide
27-42
Cisco IOS IPS prevents intrusion by comparing traffic against the signatures of
known attacks. Cisco IOS images that support Cisco IOS IPS have built-in
signatures that Cisco IOS IPS can use, and you can also have Cisco IOS IPS
import signatures for the router to use when examining traffic. Imported
signatures are stored in a signature definition file (SDF).
This help topic describes the Signatures window displayed when the router runs
Cisco IOS 12.4(11)T and later releases.
The Signatures window lets you view the configured Cisco IOS IPS signatures on
the router. You can add customized signatures, or import signatures from SDFs
downloaded from Cisco.com. You can also edit, enable, disable, retire, and
unretire signatures.
The signature tree enables you to filter the signature list on the right according to
the type of signature that you want to view. First choose the branch for the general
type of signature that you want to display. The signature list displays the
configured signatures for the type that you chose. If a plus (+) sign appears to the
left of the branch, there are subcategories that you can use to refine the filter. Click
the + sign to expand the branch and then choose the signature subcategory that
you want to display. If the signature list is empty, there are no configured
signatures available for that type.
For example: If you want to display all attack signatures, click the Attack branch
folder. If you want to see the subcategories that you can use to filter the display
of attack signatures, click the + sign next to the Attack folder. If you want to see
Denial of Service (DoS) signatures, click the DoS folder.
Click to import a signature definition file from the PC or from the router. When
you have specified the file, Cisco IOS IPS displays the signatures available in the
file, and you can choose the ones that you want to import to the router. For more
information about how to choose the signatures to import, see
Chapter 27 Cisco IOS IPS
Import Signatures.
OL-4015-12