How to configure the IDS Sensor signature with IDM from getting triggered due to internal addresses

[TCC_2]

Resolution

This can be achieved by editing the signature.

Complete these steps in order to edit the signature from the Intrusion Detection System (IDS) Device Manager (IDM):

1. Go to Signature Configuration.
   
2. Search by ID.
   
3. Edit the required signature (for example, signature 3030).
   
4. Go down to Src Addr Filter.
   
5. Click Yes and enter the range of IP addresses.

For more information, refer to the Tuning Signatures section of Defining Signatures.

Note: The Sensor should be on 5.1 code since 5.1 has the specify-src-addr-filter and the specify-dst-addr-filter parameters added to the SWEEP signature engine.