Re: IDS CISCO alarm

[Krystian Antoni <krystianantoni () gmail com>]

I'm not sure if I'm answering your question but here it goes : yes it
is possible to configure Cisco IDS (talking abour IDS v 4.1.4), to
filter out some events -> not create alarm events (its called Event
filter).

Filtering out alarms is done by configuring signature IDs, IP of
source or/and destination.

On Wed, 5 Jan 2005 18:41:29 -0300, Julio Crespo <jcrespo () sigfe cl> wrote:
> Hi, someone knows if is configurable for send alarms the IDS CISCO ?
>
> I have looked for by all the site of Cisco without obtaining no
> reference
>
> As it is possible that a IDS does not have form to alarm? it is
> necessary
>
> to be patch to log that it gives product IDS Event Viewer?
>
> Thanks a lot.
>
> --------------------------------------------------------------------------
> Test Your IDS
>
> Is your IDS deployed correctly?
> Find out quickly and easily by testing it with real-world attacks from
> CORE IMPACT.
> Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708
> to learn more.
> --------------------------------------------------------------------------

--------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it with real-world attacks from 
CORE IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 
to learn more.
--------------------------------------------------------------------------