1278863618

File Help

m Configuration

m Monitoring

O O Back For war d

<§> f Retresh Herp

Itsc^rsniis

Signature Configuration

□ O. Sensor Setup fi&Network fElAilowed Hosts B 0>SSH

j-fSlAuthorized Keys hfSlKhown Host Keys •" fklSensor Key B Q.Certificates rf^Trusted Hosts ^L ffisenrer Certificate ;• 'fiDTime '•-■piUsers 0- Q interface Configuration

•    ■fłDSummary •pDlnterfaces •-IpSinterface Pairs

•    f$VL4N Pairs

•    pDSypass

-fi&TralTlc Flow Notiflcatlons 0 ClAnalysis Engine ?• fSMitual Sensor ^Global Variables 0- Q Signature Definilion 'pDSignature Variables

ffeignature Configuration

■fScuslom Signature Wizard IpDMiscellaneous 0- Q> Event Action Rules -1jS)Eventvariables f5TargetValue Rating pDEvent Action Oveirides pSEyent Action Fllters f§General Settings

_i —

a

A rt i. . i j.. .

IDM is initialized successfully.

SelectBy: |aii Signatures 3 Select Criterla [-N/A- jJ

Sig ID	SubSig ID	Name	Enabled	Action	Severity	Fidelity Rating
				pruuuuu ajuu-
1250	0	Packet Bad Lenglh	Yes	Deny Packet In.	Medium	75
1300	0	TCP Segment Overwrite	Yes	DenyConnecli... ProduceAJert	High	100
1301	0	TCP Session lnactivity Timeout	Yes		informatio...	100
1302	0	TCP Session Embryonic Timeout	Yes		Informatio...	100
1303	0	TCP Session Ciosing Timeout	Yes		informatio.	100
1304	0	TCP Session Packet Oueue Overflow	Yes	Deny Packet In... Produce Alert	informatio...	100
1305	0	TCP URG flag set	NO	Modify Packet 1	informatio..	100
1306	0	TCP Option Others	Yes	Modify Packet 1... ProduceAJert	Low	100
1306	4	TCP Option Others	No	Modify Packet 1 .	informatio...	100
1306	5	TCP Option Oth8rs	No	Modify Packet 1...	Informatio...	100
1306	1	TCP Option Others	N0	Modify Packet l	informatio.	100
1306	3	TCP Option Others	No	Modify Packet 1...	Informatio...	100
1306	2	TCP Option Others	NO	Modify Packet l .	informatio..	100
1307	0	TCP Window variation	NO	DenyConnecli... ProduceAJert	High	100
1308	0	TTL evaslon	Yes	Modify Packet 1.	Low	100

Restore Defaults

Apply

Reset

Select Ali

NSDB Link

Add

Clone

Edit

Enable

Disable

Actions

Delete

Activate

Retire

CISCO

administrator

a