7-12
Cisco Intrusion Prevention System Sensor CLI Configuration Guide for IPS 7.2
OL-29168-01
Chapter 7 Defining Signatures
Configuring Signatures
Configuring Signature Fidelity Rating
Use the sig-fidelity-rating command in signature definition submode to configure the signature fidelity
rating for a signature.
The following option applies:
•
sig-fidelity-rating—Identifies the weight associated with how well this signature might perform in
the absence of specific knowledge of the target. The valid value is 0 to 100.
Configuring the Signature Fidelity Rating
To configure the signature fidelity rating for a signature, follow these steps:
Step 1
Log in to the CLI using an account with administrator or operator privileges.
Step 2
Enter signature definition submode.
sensor# configure terminal
sensor(config)# service signature-definition sig0
Step 3
Specify the signature you want to configure.
sensor(config-sig)# signatures 12000 0
Step 4
Specify the signature fidelity rating for this signature.
sensor(config-sig-sig)# sig-fidelity-rating 50
Step 5
Verify the settings.
sensor(config-sig-sig)# show settings
<protected entry>
sig-id: 12000
subsig-id: 0
-----------------------------------------------
alert-severity: low <defaulted>
sig-fidelity-rating: 50 default: 85
promisc-delta: 15 <defaulted>
sig-description
-----------------------------------------------
sig-name: Gator Spyware Beacon <defaulted>
sig-string-info: /download/ User-Agent: Gator <defaulted>
sig-comment: <defaulted>
alert-traits: 0 <defaulted>
release: 71 <defaulted>
-----------------------------------------------
Step 6
Exit signatures submode.
sensor(config-sig-sig)# exit
sensor(config-sig)# exit
Apply Changes:?[yes]:
Step 7
Press Enter to apply the changes or enter
no
to discard them.