How should you create a custom signature that will fire when a series of pre-defined signatures
occur and you want the Cisco IPS Sensor to generate alerts only for the new custom signature,
not for the individual signatures?
A.
Use the Normalizer engine and remove the Produce Alert action from the component
signatures.
B.
Use the Normalizer engine and set the summary mode to Global Summarize.
C.
Use the ATOMIC engine and set the summary mode to Global Summarize.
D.
Use theMeta engine and remove the Produce Alert action from the component signatures.
E.
Use the Service engine and set the summary mode to Global Summarize.
F.
Use the Trojan engine and remove the Produce Alert action from the component signatures.