Cisco Systems 2.5 Import Signatures

27-51
Cisco Router and Security Device Manager 2.5 User’s Guide
OL-4015-12
Chapter27 Cisco IOS IPS
Edit IPS
•produce-alert—Generate an alert. Same as denyFlowInline and
deny-connection-inline.
•produce-verbose-alert—Generate an alert which includes an encoded dump
of the offending packet. Same as alarm.
•reset—Reset the connection and drop the offending packet. Same as
reset-tcp-connection.
•reset-tcp-connection—Send TCP RESETS to terminate the TCP flow. Same
as reset.
Import Signatures
Use the Import IPS window to import signatures from an SDF or other file on your
PC. The information in this window tells you which signatures are available from
the SDF, and which of them are already deployed on your router.
How to Import Signatures
To import signatures, follow these steps:
Step1 Use the signature tree, View By drop-down list, and Criteria List drop-down list
to display the signatures you want to import.
In the signature list, uncheck the Import checkbox for the signatures that you do
not want to import. If you want to uncheck the Import checkbox for all of the
signatures, click the Unselect All button, which changes to the Select All button
Step2 Check the checkbox Do not import signatures that are defined as disabled if
you want to avoid importing signatures that may degrade router performance
when used.
Step3 Click the Merge button to merge the imported signatures with the signatures that
are already configured on the router, or the Replace button to replace the already
configured signatures.
See Merge Button and Replace Button for more information.
Step4 Click the Apply Changes button in the Edit IPS window to deploy the imported
signatures.