27-39
Cisco Router and Security Device Manager 2.5 User’s Guide
OL-4015-12
Chapter27 Cisco IOS IPS
Edit IPS
Signature List
Displays the signatures retrieved from the router, and any signatures added from
an SDF.
Note Signatures that are set to import and are identical to deployed signatures will not
be imported and will not appear in the signature list.
The signature list can be filtered using the selection controls.
Right-click Context Menu
If you right-click a signature, Cisco SDM displays a context menu with the
following options:
Enabled Enabled signatures are indicated with a green icon. If enabled,
the actions specified when the signature is detected is carried out.
Disabled signatures are indicated with a red icon. If di sabled, the
actions are disabled and are not be carried out.
Alert (!) This column may contain the yellow Wait icon.
This icon indicates new signatures that have not been delivered
to the router or modified signatures that have not been delivered
to the router.
Sig ID Numerical signature ID. For example: the sigID for ICMP Echo
Reply is 2000.
SubSig ID Subsignature ID.
Name Name of the signature. For example: ICMP Echo Reply.
Action Action to take when the signature is detected.
Filter ACL associated with the corresponding signature.
Severity Severity level of the event. Severity levels are informational, low,
medium, and high
Engine Engine to which the signature belongs.