I'd like to efficiently tune signatures in IOS IPS on one router, a 1941. Available options I found are:
So, if one of you has an idea about a tool, whether Cisco or 3rd party, running preferably on Windows, it is very velcome!
I have only played with the CLI and with that I was able to selective enable the signatures I wanted (even using the sub-id intentifier), changed the action,compile the ones required, etc.
If this is what you are looking for when refering to tune signatures CLI will be fine, if more than that is needed well you have all of the software that you could use.
No other software available
Hi, many thanks for your follow-up!
So, you manage the almost 6000 signatures (S761) that way then? You handle them one by one? Or you have a script?