topic Re: exclude destination address from sig in Network Security https://community.cisco.com/t5/network-security/exclude-destination-address-from-sig/m-p/948232#M79896 <HTML><HEAD></HEAD><BODY><P>thank you for for your quick reply... must this be done via CLI or can it be done in the GUI? Thanks. </P><P></P></BODY></HTML> Thu, 29 May 2008 16:03:40 GMT dglosser 2008-05-29T16:03:40Z exclude destination address from sig https://community.cisco.com/t5/network-security/exclude-destination-address-from-sig/m-p/948230#M79889 <P>New to Cisco IPS.... </P><P></P><P>I wish to EXCLUDE a single destination IP address from a signature -- have the sig fire it it trips for all BUT one IP address (which is a confirmed false positive). </P><P></P><P>The sig name is BO2K-UDP. want to have it ignore events for a single destination but have it trip normally for all other destinations. Thanks.</P><P></P> Sun, 10 Mar 2019 11:07:48 GMT https://community.cisco.com/t5/network-security/exclude-destination-address-from-sig/m-p/948230#M79889 dglosser 2019-03-10T11:07:48Z Re: exclude destination address from sig https://community.cisco.com/t5/network-security/exclude-destination-address-from-sig/m-p/948231#M79893 <HTML><HEAD></HEAD><BODY><P>You want to set up an Event Action Filter.</P><P>Here's the 6.0 version:</P><P><A class="jive-link-custom" href="http://www.cisco.com/en/US/docs/security/ips/6.0/configuration/guide/cli/cliEvAct.html" target="_blank">http://www.cisco.com/en/US/docs/security/ips/6.0/configuration/guide/cli/cliEvAct.html</A></P><P></P></BODY></HTML> Thu, 29 May 2008 15:11:19 GMT https://community.cisco.com/t5/network-security/exclude-destination-address-from-sig/m-p/948231#M79893 rhermes 2008-05-29T15:11:19Z Re: exclude destination address from sig https://community.cisco.com/t5/network-security/exclude-destination-address-from-sig/m-p/948232#M79896 <HTML><HEAD></HEAD><BODY><P>thank you for for your quick reply... must this be done via CLI or can it be done in the GUI? Thanks. </P><P></P></BODY></HTML> Thu, 29 May 2008 16:03:40 GMT https://community.cisco.com/t5/network-security/exclude-destination-address-from-sig/m-p/948232#M79896 dglosser 2008-05-29T16:03:40Z