<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Cisco IPS anomaly engine in Network Security</title>
    <link>https://community.cisco.com/t5/network-security/cisco-ips-anomaly-engine/m-p/1177022#M77043</link>
    <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;anyone can help me to fully utilize this function ? thanks &lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
    <pubDate>Thu, 04 Jun 2009 05:20:04 GMT</pubDate>
    <dc:creator>yuliang13</dc:creator>
    <dc:date>2009-06-04T05:20:04Z</dc:date>
    <item>
      <title>Cisco IPS anomaly engine</title>
      <link>https://community.cisco.com/t5/network-security/cisco-ips-anomaly-engine/m-p/1177021#M77042</link>
      <description>&lt;P&gt;hi, &lt;/P&gt;&lt;P&gt; anyone has any sample configurations ? i just look at look at pdf guide and could not understand it. &lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;a few questions too. &lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;1. The IPS signature id 13000 +- is using 'traffic anomaly engine' , it is related to AD settings ? is it correct to say that? &lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;2. How do i link between AD &amp;amp; 'traffic anomaly engine' signatures? if i assume 1. is correct &lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;3. I need to create a 'traffic anomaly' ip rule to alert me if there's a sudden surge of traffic. would this be possible via cisco ips ? &lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;i would appreciate any help as there seems to be limited information about these in cisco website &lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Thanks!&lt;/P&gt;&lt;P&gt;&lt;/P&gt;</description>
      <pubDate>Sun, 10 Mar 2019 11:38:40 GMT</pubDate>
      <guid>https://community.cisco.com/t5/network-security/cisco-ips-anomaly-engine/m-p/1177021#M77042</guid>
      <dc:creator>yuliang13</dc:creator>
      <dc:date>2019-03-10T11:38:40Z</dc:date>
    </item>
    <item>
      <title>Re: Cisco IPS anomaly engine</title>
      <link>https://community.cisco.com/t5/network-security/cisco-ips-anomaly-engine/m-p/1177022#M77043</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;anyone can help me to fully utilize this function ? thanks &lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Thu, 04 Jun 2009 05:20:04 GMT</pubDate>
      <guid>https://community.cisco.com/t5/network-security/cisco-ips-anomaly-engine/m-p/1177022#M77043</guid>
      <dc:creator>yuliang13</dc:creator>
      <dc:date>2009-06-04T05:20:04Z</dc:date>
    </item>
  </channel>
</rss>

