38-28
User Guide for Cisco Security Manager 4.4
OL-28826-01
Chapter 38 Defining IPS Signatures
Configuring Signature Settings
TCP Reassembly Mode The mode the sensor should use to reassemble TCP sessions with the
following options:
•Asymmetric—May only be seeing one direction of bidirectional
traffic flow.
Note Asymmetric mode lets the sensor synchronize state with the
flow and maintain inspection for those engines that do not
require both directions. Asymmetric mode lowers security
because full protection requires both sides of traffic to be seen.
•Loose—Use in environments where packets might be dropped.
•Strict—If a packet is missed for any reason, all packets after the
missed packet are not processed.
Max IP Log Packets The number of packets you want logged.
IP Log Time The duration you want the sensor to log, from 1 to 60 minutes. The
default is 30 minutes.
Max IP Log Bytes The maximum number of bytes you want logged.
Table38-6 Signature Settings Page (Continued)
Element Description