Firesight verify IPS rule

[Eugen Bitca]

Hello,

How to verify if network traffic is checked by IPS rules.

I have set p a rule to inspect telnet traffic for root login from a specific host, but no event is generated when I telnet to a host with root login.

ASA5512-x

access-list sfr_redirect line 1 extended permit ip any any
!
class-map sfr
 match access-list sfr_redirect
!
policy-map global_policy
 class sfr
  sfr fail-open
!

Thank you

[syeda3]

Please refer to the below urls for Firesight system which might assist to answer your inquiry.

http://www.cisco.com/c/en/us/td/docs/security/firesight/541/user-guide/FireSIGHT-System-UserGuide-v5401.html

http://www.cisco.com/c/en/us/support/docs/security/firesight-management-center/118595-configure-firesight-00.html

Hope to help.

[p.juarezponte]

Hello,

Could you fix this?

I am trying to implement something similar, maybe could  help me how you solved this