7-13
Cisco Intrusion Prevention System Sensor CLI Configuration Guide for IPS 7.2
OL-29168-01
Chapter7 Defining Signatures
Configuring Signatures
Configuring the Status of Signatures
Use the status command in signature definition submode to specify the status of a sp ecific signature.
The following options apply:
•
status—Identifies whether the signature is enabled, disabled, or retired:
–
enabled {true | false}—Enables the signature.
–
retired {true | false}—Retires the signature.
–
obsoletes signature_ID—Shows the other signatures that have been obsoleted by this signature.
Caution
Activating and retiring signatures can take 30 minutes or longer.
Changing the Signature Status
To change the status of a signature, follow these steps:
Step 1
Log in to the CLI using an account with administrator or operator privileges.
Step 2
Enter signature definition submode.
sensor# configure terminal
sensor(config)# service signature-definition sig1
Step 3
Choose the signature you want to configure.
sensor(config-sig)# signatures 12000 0
Step 4
Change the status for this signature.
sensor(config-sig-sig)# status
sensor(config-sig-sig-sta)# enabled true
Step 5
Verify the settings.
sensor(config-sig-sig-sta)# show settings
status
-----------------------------------------------
enabled: true default: false
retired: false <defaulted>
-----------------------------------------------
sensor(config-sig-sig-sta)#
Step 6
Exit signatures submode.
sensor(config-sig-sig-sta)# exit
sensor(config-sig-sig)# exit
sensor(config-sig)# exit
Apply Changes:?[yes]:
Step 7
Press Enter to apply the changes or enter
no
to discard them.