cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1067
Views
0
Helpful
1
Replies

FireSight recommended signatures

andrew.king
Level 1
Level 1

FireSight has a list of signatures that it recommends for disabling. What are the requirements that these signatures meet to be recommended for disabling?

1 Accepted Solution

Accepted Solutions

Dennis Perto
Level 5
Level 5

It really depends on the rule. 

The recommendation is made having these things in mind; Network Analysis Policy, Host Profiles, "Rule overhead", CVSS score, etc..

If the rule does not have a CVSS score the recommendation is always to disable the rule. Try searching for "blacklist" in the rules. This is not my recommendation. 

View solution in original post

1 Reply 1

Dennis Perto
Level 5
Level 5

It really depends on the rule. 

The recommendation is made having these things in mind; Network Analysis Policy, Host Profiles, "Rule overhead", CVSS score, etc..

If the rule does not have a CVSS score the recommendation is always to disable the rule. Try searching for "blacklist" in the rules. This is not my recommendation. 

Review Cisco Networking for a $25 gift card