Anomaly Detection Knowledge Base

[arashramezani]

the only way to build a anomaley detection knowlege base is put IPS in learning mode for a time like 72 hours or is there any file or resource to download? I mean KB file and put into sensor something like that. Anomaley Detection Knowledge Base page ?!

[rhermes]

Arash

Your IPS Sensors need to build this database on their own, based on the traffic they see. There is no reference database to install. Here are the configuration details:

http://www.cisco.com/en/US/docs/security/security_management/cisco_security_manager/security_manager/4.0/user/guide/ipsanom.html#wp530821

- Bob

[arashramezani]

I already saw that page

by the way tnx a lot