Chapter 22 IDP Commands

Is a scan policy type, DNS service

Is enabled

Generates logs.

Router# configure terminal Router(config)#

Router(config)# idp search signature LAN_IDP name “worm” sid 12345 severity -> 1 platform 4 policytype 4 service 1 activate yes log log action 2

22.4 IDP Custom Signatures

Use these commands to create a new signature or edit an existing one.

It is recommended you use the web configurator to create/edit signatures using the web configurator Anti-X > IDP > Custom Signatures screen.

You must use the web configurator to import a custom signature file.

Table 89 Custom Signatures

COMMAND

DESCRIPTION

idp customize signature quoted_string

Create a new custom signature. The quoted

 

string is the signature command string enclosed

 

in quotes. for example. "alert tcp any any <> any

 

any (msg: \"test\"; sid: 9000000 ; )".

 

 

idp customize signature edit quoted_string

Edits an existing custom signature.

no idp customize signature custom_sid

Deletes a custom signature.

show idp signatures custom-signature custom_sid

Displays custom signature information.

{details contents non-contents}

 

show idp signatures custom-signature all details

Displays all custom signatures’ information.

show idp signatures custom-signature number

Displays the total number of custom signatures.

156

 

NXC CLI Reference Guide