Cisco 4215 - Intrusion Detection Sys Sensor, Configuration Manual, Page: 133 / 536

7-15
Cisco Intrusion Prevention System Sensor CLI Configuration Guide for IPS 5.0
78-16527-01
Chapter 7 Defining Signatures
Configuring Signatures
http-policy
-----------------------------------------------
http-enable: true default: false
max-outstanding-http-requests-per-connection: 5 default: 10
aic-web-ports: 80-80,3128-3128 default: 80-80,3128-3128,8000-8000,8010-
8010,8080-8080,8888-8888,24326-24326
-----------------------------------------------
ftp-enable: true default: false
-----------------------------------------------
sensor(config-sig-app)#
Step 6
Exit signature definition submode:
sensor(config-sig-app)# exit
sensor(config-sig)# exit
Apply Changes:?[yes]:
Step 7 Press Enter to apply the changes or type
no
to discard them.
AIC Request Method Signatures
The HTTP request method has two categories of signatures:
• Define request method—Allows actions to be associated with request methods. You can expand and
modify the signatures (
define-request-method ).
•
Recognized request methods—Lists methods that are recognized by the sensor
(
recognized-request-methods ).
Table 7-1 lists the predefined define request method signatures. Enable the signatures that have the
predefined method you need.For the procedure for enabling signatures, see Configuring the Status of
Signatures, page 7-10 .
Table 7-1 Request Method Signatures
Signature ID Define Request Method
12676 Request Method Not Recognized
12677 Define Request Method PUT
12678 Define Request Method CONNECT
12679 Define Request Method DELETE
12680 Define Request Method GET
12681 Define Request Method HEAD
12682 Define Request Method OPTIONS
12683 Define Request Method POST
12685 Define Request Method TRACE
12695 Define Request Method INDEX
12696 Define Request Method MOVE
12697 Define Request Method MKDIR
12698 Define Request Method COPY
12699 Define Request Method EDIT