IPS and CSM FlexConfig

[cpaquet]

Can we Flex signatures tuning using CSM?  I posted the question 3 days ago on the CSM forum, however, no one has answered it yet?

Thanks.

Cath.

[alphaccie · Accepted solution]

Not supported. But I wonder why you need to use Flexconfigs for IPS Signature tuning when it is supported natively?

[cpaquet]

If we have many IPS sensors and are using CSM to push new signatures and common configurations, however, IPS on DMZ1 and DMZ2 are a few signatures that need tweaking differently from each other, I was wondering if FlexConfig could have been used to push the signature customizations.

Regards,

Cath.

[alphaccie]

I see. If using CSM, you should create different shared policies for DMZs and all other IPS in general. Another common practices is to configured different virtual sensors or simply different signature policies for these exceptions. Hope it helps.

Sam