IDS MC

[wkho]

Hello,

Have anyone tried to implement the filter function of the IDS MC on an IDSM? I just tried to set up couple of filters and applied it to the IDSM but I am still seeing the excluded signatures showing up on my eventfile. Any ideas?

Thanks

[p.krane]

The signatures distill network information and compare it against a rule set indicating typical intrusion activity. If a signature detects misuse or unauthorized activity, it generates an event, which, if it indicates a severe violation, causes an alarm to appear.