topic IDS Signatures in Network Security https://community.cisco.com/t5/network-security/ids-signatures/m-p/384005#M97310 <P>I currently have a Cisco 4235 NIDS with VMS. I am trying to research more information on the signatures that are being reported in our daily reports. Do you know where I can start researching the signatures and the possible resolutions?</P><P>Is there a best practices guide to managing IDS?</P> Sun, 10 Mar 2019 09:14:03 GMT joe 2019-03-10T09:14:03Z IDS Signatures https://community.cisco.com/t5/network-security/ids-signatures/m-p/384005#M97310 <P>I currently have a Cisco 4235 NIDS with VMS. I am trying to research more information on the signatures that are being reported in our daily reports. Do you know where I can start researching the signatures and the possible resolutions?</P><P>Is there a best practices guide to managing IDS?</P> Sun, 10 Mar 2019 09:14:03 GMT https://community.cisco.com/t5/network-security/ids-signatures/m-p/384005#M97310 joe 2019-03-10T09:14:03Z Re: IDS Signatures https://community.cisco.com/t5/network-security/ids-signatures/m-p/384006#M97313 <HTML><HEAD></HEAD><BODY><P>A great way to start, IMHO, is to read the NSDB entry for each SigID that you have questions about. Using a browser, you can navigate through the description provided by Cisco and further drill into and find all the supporting technical information (including links) used to develop the alarm.</P><P></P><P>If you want to check the latest threats Cisco is building a signature for, as well as the NSDB online, it is available at the following URL:</P><P><A class="jive-link-custom" href="http://www.cisco.com/pcgi-bin/front.x/ipsalerts/ipsalertsHome.pl" target="_blank">http://www.cisco.com/pcgi-bin/front.x/ipsalerts/ipsalertsHome.pl</A></P><P></P><P>I hope this helps,</P><P>Alex Arndt</P><P></P></BODY></HTML> Fri, 14 Jan 2005 14:12:55 GMT https://community.cisco.com/t5/network-security/ids-signatures/m-p/384006#M97313 a.arndt 2005-01-14T14:12:55Z