About enelson

enelson · 07-09-2007

We currently have two 256MB memory DIMM's. Can we upgrade to two 512MB memory DIMM's? We are having a lot of difficulty with upgrades. Our AIP modules are fine and upgrades spike the memory up to 850MB but always settle at 640MB at a stable rest...

enelson · 04-25-2007

We have changed the configuration through the IDM on the local sensor. Now we have to re-import so CSM is synched up. The interface has changed substantially. Has anyone done this yet?

enelson · 03-09-2007

We upgraded one of our sensors to 6.0(1)E1 and now we are seeing extremely high alerts on this particular signature. The signature is NOT set to alert. Any ideas on what we can do to stop the alert other than filter something that should not need f...

enelson · 01-30-2007

Hey...we are dying with our monthly reports. We have to reschedule them EVERY month. This could be resolved by a simple option that says "send on the 1st of every month". Is anyone aware of something that we are missing? We do 60 of these every m...

enelson · 09-29-2006

Seeing alot of activity with regard to this new vulnerability. The sensor is denying packets. The html is usually in the "Context" of the packet. Has anyone seen false positives for this signature?<html xmlns:v="urn:schemas-microsoft-com:vm

enelson · 06-30-2007

Help...monthly report time and still no answer for the reports we must reschedule every month.

enelson · 05-31-2007

Does anyone have a solution for this?Engineers is this on the list for future enhancements?Note that there is NOT an option to run reports on the 1st of every month. We have to hand schedule this every month. Insanity!Report Generation Options U...

enelson · 04-26-2007

re-importation is now done by right clicking on the IPS and selecting Discover Policies From Device.

enelson · 03-09-2007

You are correct...there was an event action override to alert 0-100.I thought this was removed by the other analyst and was thrown by the new alerts coming in from 6.0 but not triggered in 5(4).Thanks....feeling sheepish now.

enelson · 02-05-2007

Thanks for your reponse....can you highlight the part that discusses scheduling reports...I only see ip logging but unsure of how this relates. Thanks in advance.

Member Since	‎05-06-2005 12:06 PM
Date Last Visited	‎08-18-2017 03:53 AM
Posts	25

User Statistics

User Activity

Cisco 4215 IPS memory upgrade?

How do you re-import IPS config in CSM 3.1?

Signature 1315 - ACK w/o TCP Stream - why alerting?

Monthly Report Scheduling for CiscoWorks Security Monitor

Sig5813 Vector Markup Language Vulnerability - False Positives?

Re: Monthly Report Scheduling for CiscoWorks Security Monitor

Re: Monthly Report Scheduling for CiscoWorks Security Monitor

Re: How do you re-import IPS config in CSM 3.1?

Re: Signature 1315 - ACK w/o TCP Stream - why alerting?

Re: Monthly Report Scheduling for CiscoWorks Security Monitor