IPS will act based on signatures, by default enabling it should not drop or impact the existing traffic. (unless legitamate harmful traffic)
You can configure it first on passive TAP mode. In this mode the IPS will not drop any traffic instead only a...
Hi Bernd,Check the time on the CDA and AD.You can set the logging level to debug and monitor the live logs when you suspect the entries are removed.- Prasad.M
1.Create an ACLaccess-list cap extended permit ip host x.x.x.x host y.y.y.yx.x.x.x = Sourcey.y.y.y = Destination2. enable captures on the interface where you want to check if the traffic is hitting,For example if you want to check on zoneA,capture ca...