Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Disable one specific IPS signature
Figure I'm missing something obvious here. Our IPS logs are absolutely spammed by the "TCP.Split.Handshake.signature" rule (2000 or so every 5 minutes). I'd like to disable just this rule and this rule only. Is there a way? I've attached a pic of how we've currently go the IPS rules set, which is to do it by severity.
0 REPLIES 0
