Cisco Systems 2.5 - page 647

27-35
Cisco Router and Security Device Manager 2.5 User’s Guide
OL-4015-12
Chapter27 Cisco IOS IPS
Edit IPS
Attacker Address
For Attacker Address, enter a range of addresses from 0.0.0.0 to 255.255.255.255,
or enter a single address in that range. If you enter a range, use a dash (-) to
separate the upper and lower bounds of the range. For example , enter
192.168.7.0-192.168.50.0.
Attacker Port
For Attacker Port, enter a range of port numbers from 0 to 65535, or enter a single
port number in that range. If you enter a range, use a dash (-) to separate the upper
and lower bounds of the range. For example, enter 988-5000.
Victim Address
For Victim Address, enter a range of addresses from 0.0.0.0 to 255.255.255.25 5,
or enter a single address in that range. If you enter a range, use a dash (-) to
separate the upper and lower bounds of the range. For example , enter
192.168.7.0-192.168.50.0.
Victim Port
For Victim Port, enter a range of port numbers from 0 to 65535, or enter a single
port number in that range. If you enter a range, use a dash (-) to separate the upper
and lower bounds of the range. For example, enter 988-5000.
Risk Rating
For Risk Rating, enter an RR range between 0 and 100.
Actions to Subtract
Click any actions that you want to subtract from matching events. To subtract
more than one action from matching events, hold down the Ctrl key when you
choose additional events. All the events that you choose for this filter will be listed
in the Event Action Filters window.