Import Signatures - Cisco ROUTER-SDM-CD User Manual

Chapter 27 Cisco IOS IPS

Import Signatures

How to Import Signatures
Step 1
Step 2
Step 3
Step 4
OL-4015-12
produce-alert—Generate an alert. Same as denyFlowInline and
•
deny-connection-inline.
produce-verbose-alert—Generate an alert which includes an encoded dump
•
of the offending packet. Same as alarm.
reset—Reset the connection and drop the offending packet. Same as
•
reset-tcp-connection.
reset-tcp-connection—Send TCP RESETS to terminate the TCP flow. Same
•
as reset.
Use the Import IPS window to import signatures from an SDF or other file on your
PC. The information in this window tells you which signatures are available from
the SDF, and which of them are already deployed on your router.
To import signatures, follow these steps:
Use the signature tree, View By drop-down list, and Criteria List drop-down list
to display the signatures you want to import.
In the signature list, uncheck the Import checkbox for the signatures that you do
not want to import. If you want to uncheck the Import checkbox for all of the
signatures, click the Unselect All button, which changes to the Select All button
Check the checkbox Do not import signatures that are defined as disabled if
you want to avoid importing signatures that may degrade router performance
when used.
Click the Merge button to merge the imported signatures with the signatures that
are already configured on the router, or the Replace button to replace the already
configured signatures.
See Merge Button and
Click the Apply Changes button in the Edit IPS window to deploy the imported
signatures.
Cisco Router and Security Device Manager 2.5 User's Guide
Replace Button for more information.
Edit IPS
27-51