B-18
Cisco Intrusion Prevention System Sensor CLI Configuration Guide for IPS 7.2
OL-29168-01
AppendixB Signature Engines
Atomic Engine
specify-max-match-offset {yes
| no}
Enables maximum match offset:
•
max-match-offset—Specifies the
maximum stream offset the
regex-string must report for a match to
be valid.
0 to 65535
IPv6
specify-authentication-header
{yes | no}
(Optional) Enables inspection of the
authentication header:
•
ah-present—Inspects the
authentication header:
–
ah-length—Specifies the length of
the authentication header to
inspect.
–
ah-next-header—Specifies the
value of the authentication header
to inspect.
•
have-ah | no-ah0 to
1028
•
0 to 255
specify-dest-options-header
{yes | no}
(Optional) Enables inspection of the
destination options header:
•
doh-present—Inspects the destination
options header:
–
doh-count—Specifies the number
of destination options headers to
inspect.
–
doh-length—Specifies the length
of destination options headers to
inspect.
–
doh-next-header—Specifies the
number of next destination options
headers to inspect.
–
doh-option-type—Specifies the
type of destination options
headers to inspect.
–
doh-option-length—Specifies the
length of destination options
headers to inspect.
•
have-doh | no-doh0
to 2
•
8 to 2048
•
0 to 255
•
0 to 255
•
0 to 255
specify-esp-header {yes | no} (Optional) Enables inspection of the ESP
header:
•
esp-present —Inspects the ESP header.
have-esp | no-esp
specify-first-next-header {yes |
no}
(Optional) Enables inspection of the first
next header:
•
first-next-header—Specifies the value
of the first next header to inspect.
0 to 255
TableB-8 Atomic IP Advanced Engine Parameters (continued)
Parameter Description Value