topic Re: cannot view or modify IOS IPS signatures in Network Security

cannot view or modify IOS IPS signatures

brianbono — Sun, 10 Mar 2019 10:47:19 GMT

what could be wrong with my config? i managed update my IOS IPS with the latest signature definition file to S291.0 and i cant seem to see the signatures or even modify them.

part of my config below:

ip ips config location flash:/ipsstore/ retries 1

ip ips notify SDEE

ip ips name sdm_ips_rule

ip ips signature-category

category all

retired true

category ios_ips basic

retired false

crypto key pubkey-chain rsa

named-key realm-cisco.pub

key-string

30820122 300D0609 2A864.....

Re: cannot view or modify IOS IPS signatures

aghaznavi — Fri, 14 Sep 2007 20:00:32 GMT

After selecting a pretuned SDF file for a router, you can do additional signature tuning tasks. You can add, edit, delete, and modify signatures to best fit your needs, or you can even create your own signatures when necessary. The following gives an example of how to add additional signatures and modify the actions using IPS MC. Select the device or device groups you want to configure, and then go to Settings->Signatures->IOS IPS.

http://www.cisco.com/en/US/products/ps6634/products_white_paper0900aecd8043bc07.shtml

Re: cannot view or modify IOS IPS signatures

brianbono — Sat, 15 Sep 2007 02:46:16 GMT

i cant add, edit, delete or even modify the signatures. kinda weired but i see IPS events happening on the monitor tab.