Application whitelisting with Cisco IPS

[rakyomin78]

Just wondering can Cisco IPS appliance 4360 do application whitelisting?

To my understanding event action filter is whitelisting based on source and destination IP address?

[Julio Carvajal · Accepted solution]

Hello,

That is correct event action filter is based on source and IP addresses, it cannot be used to map an specific application.

Regards,

Julio