27-45
Cisco Router and Security Device Manager 2.5 User’s Guide
OL-4015-12
Chapter27 Cisco IOS IPS
Edit IPS
Right-click Context Menu
If you right-click a signature, Cisco SDM displays a context menu with the
following options:
•Actions—Click to choose the actions to be taken when the signature is
matched. See Assign Actions for more information.
•Fidelity Rating—Click to enter a fidelity rating for the signature.
•Set Severity to—Click to set the severity level of a signature to: high,
medium, low, or informational.
•Restore Defaults—Click to restore the signature’s default values.
Enabled Enabled signatures are indicated with a green icon. If enabled,
the actions specified when the signature is detected is carried out.
Disabled signatures are indicated with a red icon. If di sabled, the
actions are disabled and are not be carried out.
Alert (!) This column may contain the yellow Wait icon.
This icon indicates new signatures that have not been delivered
to the router or modified signatures that have not been delivered
to the router.
Sig ID Numerical signature ID. For example: the sigID for ICMP Echo
Reply is 2000.
SubSig ID Subsignature ID.
Name Name of the signature. For example: ICMP Echo Reply.
Action Action to take when the signature is detected.
Severity Severity level of the event. Severity levels are informational, low,
medium, and high
Fidelity Rating The fidelity rating of the signature.
Retired A value of true or false. True if signature has been retired. False
if not. Retired signatures are not compiled.
Engine Engine to which the signature belongs.