Is it possible to use active ftp opposed to passive when upgrading IDS signatures? I am running 4210s with v.4.1. During signature updates for some reason the FTP connection uses a random ephemeral port instead of port 21. When I ftp manaually from t...

I am monitoring several networks with a 4210 Network IDS Sensor. Within the network is a Checkpoint firewalls 4.1. This is primarily used for VPN and Web traffic. My IDS sensor is generating many false positives which seem to be caused by the sen...

Does anyone know if there is a file in IDS 4.0 where you can manually change the action for each signature ID? IDM can be a little tedious when you have 946 signatures to change. In version 3.1 packetd.conf had all the signature configurations in ...

I am trying to upgrade a 4.0 Sensors signatures with CiscoWorks VMS. All of the 3.1 sensors upgrade with no problem. However, when I try to upgrade a 4.0 the ip audit log generates this error:"10.1.4.252: Error importing sensor version from the sen...

Has successfully filtered signatues with IDS version 4.0? After I set up a filter, as I normally would in version3.1, and restart the services, the IDS still sends alarms for the filtered signature. Here is how I set up the t he filter. 1. Log on t...