What is a best practice to follow before tuning a Cisco IPS signature?

What is a best practice to follow before tuning a Cisco IPS signature?

What is a best practice to follow before tuning a Cisco IPS signature?

A.
Disable all the alert actions on the signature to be tuned.

B.
Disable the signature to be tuned.

C.
Create a clone of the signature to be tuned.

D.
Increase the number of events required to trigger the signature to be tuned.

E.
Decrease the attention span (maximum inter-event interval) of the signature to be tuned



Leave a Reply 0

Your email address will not be published. Required fields are marked *