Create Ips Rule - Cisco OL-4015-08 User Manual

IPS Rules
Global Settings Drawer
SDEE Messages Drawer
Signatures Drawer
NM CIDS Drawer
IPS Rules

Create IPS Rule

Cisco Router and Security Device Manager Version 2.2 User's Guide
19-32
Click to display the Global Settings
the overall operation of IOS IPS.
Secure Device Event Exchange (SDEE) messages report on the progress of IPS
initialization and operation. Click this node to display the
window, where you can review SDEE messages and filter them to display only
error messages or only status messages.
Click to display the Signatures
router.
This node is visible if a Cisco Intrusion Detection System network module is
installed in the router. Click to manage the IDS module.
An IPS rule specifies an interface, the type and direction of traffic that IPS is to
examine, and the location of the Signature Definition File (SDF) that the router
uses.
Click the Create IPS Rule tab to use a wizard that guides you through rule
configuration. Click the Edit IPS Rule tab to edit the IPS rules on the router.
The Create IPS Rule wizard prompts you for the following information:
The interface on which to apply the rule.
•
Whether to apply IPS on inbound or on outbound traffic, or both.
•
The access rule to use to select the type of traffic to examine.
•
Chapter 19
window where you make settings that affect
window where you can manage signatures on the
Intrusion Prevention System
SDEE Messages
OL-4015-08