topic Average Parameter Settings in Network Security https://community.cisco.com/t5/network-security/average-parameter-settings/m-p/365513#M97389 <P>What engine parameters would be acceptable to tune out false positives. I do understand that this is network specific, but was looking for other's averages. </P><P>SERVICE.SMB (6255)? I'm thinking HitCount= ~25</P><P>FLOOD.NET (UDP)? I'm thinking Rate=4900</P><P>FLOOD.NET (TCP)? Maybe Rate=400</P> Sun, 10 Mar 2019 09:13:41 GMT rpmanning 2019-03-10T09:13:41Z Average Parameter Settings https://community.cisco.com/t5/network-security/average-parameter-settings/m-p/365513#M97389 <P>What engine parameters would be acceptable to tune out false positives. I do understand that this is network specific, but was looking for other's averages. </P><P>SERVICE.SMB (6255)? I'm thinking HitCount= ~25</P><P>FLOOD.NET (UDP)? I'm thinking Rate=4900</P><P>FLOOD.NET (TCP)? Maybe Rate=400</P> Sun, 10 Mar 2019 09:13:41 GMT https://community.cisco.com/t5/network-security/average-parameter-settings/m-p/365513#M97389 rpmanning 2019-03-10T09:13:41Z Re: Average Parameter Settings https://community.cisco.com/t5/network-security/average-parameter-settings/m-p/365514#M97390 <HTML><HEAD></HEAD><BODY><P>Have a look at the document 'SAFE: A Security Blueprint for Enterprise Networks'. It will provide a few pointers that you will find helpful.</P><P><A class="jive-link-custom" href="http://www.cisco.com/en/US/netsol/ns340/ns394/ns171/ns128/networking_solutions_white_paper09186a008009c8b6.shtml" target="_blank">http://www.cisco.com/en/US/netsol/ns340/ns394/ns171/ns128/networking_solutions_white_paper09186a008009c8b6.shtml</A></P></BODY></HTML> Thu, 13 Jan 2005 22:10:47 GMT https://community.cisco.com/t5/network-security/average-parameter-settings/m-p/365514#M97390 jsivulka 2005-01-13T22:10:47Z Re: Average Parameter Settings https://community.cisco.com/t5/network-security/average-parameter-settings/m-p/365515#M97391 <HTML><HEAD></HEAD><BODY><P>Great idea. Thanks</P></BODY></HTML> Fri, 21 Jan 2005 20:17:06 GMT https://community.cisco.com/t5/network-security/average-parameter-settings/m-p/365515#M97391 randy.manning 2005-01-21T20:17:06Z