unblocking host IP in IPS 4260

[senthil.nayagam]

Hi

we have cisco IPS 4260 which blocks a public ip outside our network.This IP is used to send mails.

I tried following commands

sensor# configure terminal

sensor(config)# service network-access

sensor(config-net)#

Step 3 Enter general submode.

sensor(config-net)# general

Step 4 Specify the address that should never be blocked:

•Single host

sensor(config-net-gen)# never-block-hosts 66.199.235.35

But still we are not able to access 66.199.235.35 on port 25

Kindly suggest

[joseoroz]

Hello senthil.nayagam,

You can create an event action filter for that host so it doesnt get blocked. Here are the steps to do it from the GUI which is very simple:

http://www.cisco.com/c/en/us/support/docs/security/intrusion-prevention-system/113575-tune-ips-eaf-00.html

Kind regards,

Jose Orozco.