Contents
xxiv
Cisco Intrusion Prevention System Manager Express Configuration Guide for IPS 7.1
OL-19891-01
SensorApp New Features A-25
Packet Flow A-26
Signature Event Action Processor A-26
CollaborationApp A-28
Understanding the CollaborationApp A-28
Update Components A-28
Error Events A-29
SwitchApp A-30
CLI A-30
Understanding the CLI A-30
User Roles A-30
Service Account A-31
Communications A-32
IDAPI A-32
IDIOM A-33
IDCONF A-33
SDEE A-34
CIDEE A-34
Cisco IPS File Structure A-35
Summary of Cisco IPS Applications A-36
APPENDIX
B Signature Engines B-1
Understanding Signature Engines B-1
Master Engine B-4
General Parameters B-4
Alert Frequency B-7
Event Actions B-8
Regular Expression Syntax B-9
AIC Engine B-10
Understanding the AIC Engine B-10
AIC Engine and Sensor Performance B-11
AIC Engine Parameters B-11
Atomic Engine B-13
Atomic ARP Engine B-13
Atomic IP Advanced Engine B-14
Atomic IP Engine B-24
Atomic IPv6 Engine B-27
Fixed Engine B-28