Bloking in inline

[koiflowerhorn]

I have succesfully configured my IDSM2 to perform inline with my cat6500. I would to ask if anyone has an idea if idsm can block connection not host block? There are some issue in our organization that some traffic from a host has a legitimate traffic but was blocked since I configured a signature to block if ever triggered.

Hope anyone has done this.

[Fernando_Meza]

Starting with IPS version 5.0 you can perform

deny attacher inline

deny connection inline

deny packet inline

If you are running version 5.0 then double check the signature actions ..

I hope it helps ... please rate it if it does !!!

[koiflowerhorn]

Thanks for this! Do you mean that in order to deny connection and not deny host i should only set "deny packet inline or deny connection inline" ?