IDS signatures on by default?

[astroman]

I have a 2611 with the FW/IDS feature set. Do I have to enable all IDS signatures individually or are they mass enabled with the 'ip audit' command?

Thanks in advance...

-->jason

[scoclayton]

Jason,

Consider them mass enabled when you apply the 'ip audit' command. You can then disable sigs individually you wish. Here is the end all doc for IOS IDS. Good luck!

http://www.cisco.com/univercd/cc/td/doc/product/software/ios120/120newft/120t/120t5/iosfw2/ios_ids.htm

Scott

[astroman]

Thanks Scott....exactly what I needed.