<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Alerts in Network Security</title>
    <link>https://community.cisco.com/t5/network-security/alerts/m-p/2099475#M54360</link>
    <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;Can you share the running configuration for that particular signature, or take some captures related to the signature configuration and post it here.&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
    <pubDate>Sun, 02 Dec 2012 07:39:43 GMT</pubDate>
    <dc:creator>Julio Carvajal</dc:creator>
    <dc:date>2012-12-02T07:39:43Z</dc:date>
    <item>
      <title>Alerts</title>
      <link>https://community.cisco.com/t5/network-security/alerts/m-p/2099470#M54347</link>
      <description>&lt;P&gt;Hi All,&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;I have tunned signatures for u torrent to get alerts on ips.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Used utorrent on pc&amp;nbsp; to download software but still i am not receving any events on ips.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;What may be the issue.Ping and traceroute works fine from pc to ips.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Can anyone guide to tune basic signature to get alerts on ips?&lt;/P&gt;</description>
      <pubDate>Sun, 10 Mar 2019 12:50:25 GMT</pubDate>
      <guid>https://community.cisco.com/t5/network-security/alerts/m-p/2099470#M54347</guid>
      <dc:creator>prashantrecon</dc:creator>
      <dc:date>2019-03-10T12:50:25Z</dc:date>
    </item>
    <item>
      <title>Alerts</title>
      <link>https://community.cisco.com/t5/network-security/alerts/m-p/2099471#M54349</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;Hello Prashant,&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Do you get events with ICMP traffic?&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Regards&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Thu, 29 Nov 2012 01:49:02 GMT</pubDate>
      <guid>https://community.cisco.com/t5/network-security/alerts/m-p/2099471#M54349</guid>
      <dc:creator>Julio Carvajal</dc:creator>
      <dc:date>2012-11-29T01:49:02Z</dc:date>
    </item>
    <item>
      <title>Alerts</title>
      <link>https://community.cisco.com/t5/network-security/alerts/m-p/2099472#M54353</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;Hi ,&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;By default in IPS icmp echo reply and echo request signature is disable.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;i getting only events related to global correlation.(curreltly i am not using global correlation , i have not configured it)&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Regards,&lt;/P&gt;&lt;P&gt;Prashant&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Thu, 29 Nov 2012 04:39:08 GMT</pubDate>
      <guid>https://community.cisco.com/t5/network-security/alerts/m-p/2099472#M54353</guid>
      <dc:creator>prashantrecon</dc:creator>
      <dc:date>2012-11-29T04:39:08Z</dc:date>
    </item>
    <item>
      <title>Alerts</title>
      <link>https://community.cisco.com/t5/network-security/alerts/m-p/2099473#M54356</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;Hello Prashant,&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P style="background-color: #ffffff; border-collapse: collapse; font-size: 12px; list-style: none; font-family: Arial, verdana, sans-serif;"&gt;By default in IPS icmp echo reply and echo request signature is disable.&lt;/P&gt;&lt;P style="background-color: #ffffff; border-collapse: collapse; font-size: 12px; list-style: none; font-family: Arial, verdana, sans-serif; min-height: 8pt;"&gt;Exactly so why dont you enable it and set it to generate an alert so you can see them??&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P style="background-color: #ffffff; border-collapse: collapse; font-size: 12px; list-style: none; font-family: Arial, verdana, sans-serif; min-height: 8pt;"&gt;I mean I dont think I understand your question is this is not what you are looking for!!! &lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Thu, 29 Nov 2012 16:45:58 GMT</pubDate>
      <guid>https://community.cisco.com/t5/network-security/alerts/m-p/2099473#M54356</guid>
      <dc:creator>Julio Carvajal</dc:creator>
      <dc:date>2012-11-29T16:45:58Z</dc:date>
    </item>
    <item>
      <title>Alerts</title>
      <link>https://community.cisco.com/t5/network-security/alerts/m-p/2099474#M54358</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;Actually my issue is that for example if i enable the Echo reply and echo request signature and when i ping to any website or ip i am not getting any alert on my ips.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;and also if i am looking for last 72 hours events in cisco ASDM for ips i am not getting any events except "" &lt;/P&gt;&lt;P&gt;A global correlation update failed: openConnection: ""&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;About 15 days before i am able to see last 24 hours events(example dos attacks)&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;any clue why there is no events generating in IPS.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Regards,&lt;/P&gt;&lt;P&gt;Prashant&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Fri, 30 Nov 2012 03:59:22 GMT</pubDate>
      <guid>https://community.cisco.com/t5/network-security/alerts/m-p/2099474#M54358</guid>
      <dc:creator>prashantrecon</dc:creator>
      <dc:date>2012-11-30T03:59:22Z</dc:date>
    </item>
    <item>
      <title>Alerts</title>
      <link>https://community.cisco.com/t5/network-security/alerts/m-p/2099475#M54360</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;Can you share the running configuration for that particular signature, or take some captures related to the signature configuration and post it here.&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Sun, 02 Dec 2012 07:39:43 GMT</pubDate>
      <guid>https://community.cisco.com/t5/network-security/alerts/m-p/2099475#M54360</guid>
      <dc:creator>Julio Carvajal</dc:creator>
      <dc:date>2012-12-02T07:39:43Z</dc:date>
    </item>
    <item>
      <title>Alerts</title>
      <link>https://community.cisco.com/t5/network-security/alerts/m-p/2099476#M54362</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;Hi,&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;let take a example echo reply and echo request .&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Can you help me to take capture and running cofig for above mention signature.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Reagrds,&lt;/P&gt;&lt;P&gt;Prashant&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Mon, 03 Dec 2012 04:25:52 GMT</pubDate>
      <guid>https://community.cisco.com/t5/network-security/alerts/m-p/2099476#M54362</guid>
      <dc:creator>prashantrecon</dc:creator>
      <dc:date>2012-12-03T04:25:52Z</dc:date>
    </item>
  </channel>
</rss>

