Pix IDS Question

[a-janssen]

Maybe anyone can give me a hint where my mistake is here.

I configured the following:

"ip audit name test info action alarm"

When I try now to configure the same audit name for attack signatures the pix blocks this command.

"ip audit name test attack action alarm"

"ip audit interface outside test"

So my question is, is it possible in anyway to monitor simultaneously

the attack and informational Signatures?

Hope someone illuminates the dark.

;-)

Andre

[a-janssen]

OK,

found it:

". Each interface can have two policies; one for informational signatures and one for attack signatures. If a policy is defined without actions, then the configured default actions will take effect. Each policy requires a different name."