Chapter27 Cisco IOS IPS
Edit IPS
27-40
Cisco Router and Security Device Manager 2.5 User’s Guide
OL-4015-12
•Actions—Click to choose the actions to be taken when the signature is
matched. See Assign Actions for more information.
•Set Severity to—Click to set the severity level of a signature to: high,
medium, low, or informational.
•Restore Defaults—Click to restore the signature’s default values.
•Remove Filter—Click to remove a filter applied to the signature.
•NSDB help (need CCO account)—Click to display help on the Network
Security Data Base (NSDB).
Signatures marked for deletion
This area is visible when the Details button is clicked. It lists the signatures that
you deleted from the Signature List, and signatures that are marked for deletion
because imported signatures are set to replace signatures already configured on
the router. See How to Import Signatures for more information.
Signatures marked for deletion remain active in the Cisco IOS IPS configuration
until you click Apply Changes. If you exit the Signatures window and disable
Cisco IOS IPS, the marked signatures will be deleted if Cisco IOS IPS is
re-enabled.
Undelete All Button
Click to restore all signatures in the signatures marked deleted list.
Undelete Button
Click to restore specified signatures marked for deletion. When clicked the
signatures are unmarked, and returned to the list of active signatures.
Apply Changes Button
Click to deliver newly imported signatures, signature edits, and newly enabled or
disabled signatures to the router. When the changes are applied, the yellow Wait
icon is removed from the ! column. These changes are saved to your router flash
memory in the file sdmips.sdf. This file is created automatically the first time you
click Apply Changes.