Re: weired IPS 7.0 alarm case

Hello Amin

How are you viewing the alert? IDM ,IME or CLI? Have you ensured that alert
messages for all levels have been enabled in the viewing console?

You can also very the count for fired signatures from the CLI by using show
statistics virtual-sensor:

https://supportforums.cisco.com/docs/DOC-15863

Regards

Farrukh

On Mon, Sep 17, 2012 at 9:49 PM, ccie <ccie_at_axizo.com> wrote:

> Hi experts,
>
>
>
> I have a weird case, in which I couldn t make the IPS fire upon an ICMP
> echo
> crossing its inline interface pairs
>
> G0/1 <pair> G0/0 h Assigned VS0
>
> Sig0 h All signatures > signature 2000/0 is enabled
>
> ICMP request and echo reply cross its inline interface pair but it doesn t
> generate alarm as expecting at all!!!
>
>
> regards,
>
> Amin
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html

Blogs and organic groups at http://www.ccie.net
Received on Thu Sep 20 2012 - 17:26:24 ART