Excluding Internal IP addresses

ayolawrence — Sun, 10 Mar 2019 11:03:04 GMT

I want to exclude some of my network's internal IP addresses as sources. This is a recommended action for some signatures fired on the AIP-SSM of my ASA.

Pls, how and from which of the devices do I exclude the IP addresses.

Re: Excluding Internal IP addresses

rhermes — Thu, 03 Apr 2008 18:54:47 GMT

This has become a very popular question. These two threads are within the last 10 posts, but should be able to answer your question

Intrusion Prevention Systems/IDS: IPS - Event Action Filters. Which alerts do you supress -

http://forum.cisco.com/eforum/servlet/NetProf?page=netprof&forum=Security&topic=Intrusion%20Prevention%20Systems/IDS&CommCmd=MB%3Fcmd%3Ddisplay_location%26location%3D.2cbfcac9

Intrusion Prevention Systems/IDS: Tuning signature

http://forum.cisco.com/eforum/servlet/NetProf?page=netprof&forum=Security&topic=Intrusion%20Prevention%20Systems/IDS&CommCmd=MB%3Fcmd%3Ddisplay_location%26location%3D.2cc00fea

topic Re: Excluding Internal IP addresses in Network Security

Excluding Internal IP addresses

Re: Excluding Internal IP addresses