cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
986
Views
0
Helpful
1
Replies

FireSight recommended signatures

andrew.king
Level 1
Level 1

FireSight has a list of signatures that it recommends for disabling. What are the requirements that these signatures meet to be recommended for disabling?

1 Accepted Solution

Accepted Solutions

Dennis Perto
Level 5
Level 5

It really depends on the rule. 

The recommendation is made having these things in mind; Network Analysis Policy, Host Profiles, "Rule overhead", CVSS score, etc..

If the rule does not have a CVSS score the recommendation is always to disable the rule. Try searching for "blacklist" in the rules. This is not my recommendation. 

View solution in original post

1 Reply 1

Dennis Perto
Level 5
Level 5

It really depends on the rule. 

The recommendation is made having these things in mind; Network Analysis Policy, Host Profiles, "Rule overhead", CVSS score, etc..

If the rule does not have a CVSS score the recommendation is always to disable the rule. Try searching for "blacklist" in the rules. This is not my recommendation. 

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Review Cisco Networking products for a $25 gift card