topic IPS Event Management in Network Security https://community.cisco.com/t5/network-security/ips-event-management/m-p/874495#M84740 <P>Hi,</P><P></P><P>I have configured the IPS in offline mode. Now in my event viewer I m getting too much log H,L,M, I want to get few logs and also wana block the IP that generate Alarm. </P><P></P><P>I have define the action on signature but still alarm are coming. Kindly tell me how to fine tune the IPS and how to minimize the alarms.</P> Sun, 10 Mar 2019 10:58:29 GMT wasiimcisco 2019-03-10T10:58:29Z IPS Event Management https://community.cisco.com/t5/network-security/ips-event-management/m-p/874495#M84740 <P>Hi,</P><P></P><P>I have configured the IPS in offline mode. Now in my event viewer I m getting too much log H,L,M, I want to get few logs and also wana block the IP that generate Alarm. </P><P></P><P>I have define the action on signature but still alarm are coming. Kindly tell me how to fine tune the IPS and how to minimize the alarms.</P> Sun, 10 Mar 2019 10:58:29 GMT https://community.cisco.com/t5/network-security/ips-event-management/m-p/874495#M84740 wasiimcisco 2019-03-10T10:58:29Z Re: IPS Event Management https://community.cisco.com/t5/network-security/ips-event-management/m-p/874496#M84741 <HTML><HEAD></HEAD><BODY><P>Following links may help you</P><P><A class="jive-link-custom" href="http://www.cisco.com/univercd/cc/td/doc/product/iaabu/csids/csids12/idmguide/dmblock.htm" target="_blank">http://www.cisco.com/univercd/cc/td/doc/product/iaabu/csids/csids12/idmguide/dmblock.htm</A></P><P><A class="jive-link-custom" href="http://www.cisco.com/univercd/cc/td/doc/product/iaabu/csids/csids12/idmguide/dmsigwiz.htm" target="_blank">http://www.cisco.com/univercd/cc/td/doc/product/iaabu/csids/csids12/idmguide/dmsigwiz.htm</A></P></BODY></HTML> Fri, 08 Feb 2008 15:37:08 GMT https://community.cisco.com/t5/network-security/ips-event-management/m-p/874496#M84741 tstanik 2008-02-08T15:37:08Z