AIP-SSM configured with event action "produce alert", but it drop packets

[prodriguez]

Hi, I configured an AIP-SSM IPS on event action for "Produce Alert", but when fire a signature, it drop the packets. So, what will be the problem?

[aghaznavi]

Try these links:

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/csids/csids11/cliguide/clievact.htm#wp1034058

http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a00807335ca.shtml

[prodriguez]

Abdul:

Very good Links!.

Thanks You a lot for your help.

Best Regards,

Patricio.

[jshelmer]

Do you have an Event Action Override set? As the name implies, Event Action Overrides will override the action taken by the signature.