Version 6 of Cisco and the scan engines

Looking for information on the number of instances of 'rulesx' and "sigx" can be run on different platforms? For example, I can set up rules0, regles1, regles2 and even for sig0, sig1 and sig2, but how can I do?

Generally, you are limited to 4 configurations of virtual sensor... vs0 and up to 3 additional named virtual devices, such as vs1, 'this_sensor' and 'that_sensor' (see exception in the next paragraph). The number of defined components (sigX, rulesX, adX) is not capped, but a maximum of 4 will be active at any time... corresponding to the virtual sensors. It is worth noting that you can reuse components, for example sig0 can be used both vs0 and vs2 while sig1 is vs1. Ditto for rulesX and adX.

There is a limitation on the sensors 'insufficient memory', currently the 4215 and NM-CIDS, a unique virtual sensor active. These low-end sensors do not have the capacity of memory to keep several Active configurations in memory and still meet performance standards.

Tags: Cisco Security

Similar Questions

Maybe you are looking for