Solved: PIX IDS "large Ping"

don.reeves · ‎07-08-2003

Is it possible to allow large ping replies through the PIX IDS-attack signiture without completely turning the IDS off?

ywadhavk · ‎07-08-2003

Hi,

Use the "ip audit signature" command to disable this signature

ip audit signature :

Specify which messages to display, attach a global policy to a signature, and disable or exclude a signature from auditing.

I think the signature is 2151 : large ICMP traffic

Hope this helps,

yatin

ywadhavk · ‎07-08-2003

Hi,

Use the "ip audit signature" command to disable this signature

ip audit signature :

Specify which messages to display, attach a global policy to a signature, and disable or exclude a signature from auditing.

I think the signature is 2151 : large ICMP traffic

Hope this helps,

yatin