User manual

Contents
xvii
Cisco Intrusion Prevention System Sensor CLI Configuration Guide for IPS 7.2
OL-29168-01
Summary of Cisco IPS Applications
A-35
APPENDIX
B
Signature Engines
B-1
Understanding Signature Engines
B-1
Master Engine
B-4
General Parameters
B-4
Alert Frequency
B-7
Event Actions
B-8
Regular Expression Syntax
B-9
AIC Engine
B-10
Understanding the AIC Engine
B-11
AIC Engine and Sensor Performance
B-11
AIC Engine Parameters
B-11
Atomic Engine
B-14
Atomic ARP Engine
B-14
Atomic IP Advanced Engine
B-15
Atomic IP Engine
B-25
Atomic IPv6 Engine
B-29
Fixed Engine
B-30
Flood Engine
B-32
Meta Engine
B-33
Multi String Engine
B-35
Normalizer Engine
B-36
Service Engines
B-39
Understanding the Service Engines
B-40
Service DNS Engine
B-40
Service FTP Engine
B-41
Service Generic Engine
B-42
Service H225 Engine
B-44
Service HTTP Engine
B-46
Service IDENT Engine
B-48
Service MSRPC Engine
B-49
Service MSSQL Engine
B-51
Service NTP Engine
B-52
Service P2P Engine
B-53
Service RPC Engine
B-53
Service SMB Advanced Engine
B-55
Service SNMP Engine
B-57