We have a SSM module in each of our ASA-5520's and they have never really been configured correctly. Ive taken this on and am trying to learn IDS/IPS as I go. The first problem that I am seeing is that its reporting our NMS system as a possible threat because of the continual network PING sweeps that it does to monitor the network. The ID its reporting is 2100/0 - ICMP Network Sweep w/Echo. Anyway, my question is how do tell it to continue to monitor this signature, but filter out the specific address for our NMS? Thanks
