Sign In with your
Trend Micro Account
Need Help?
Need More Help?

Create a technical support case if you need further support.

How to check specific filter status via the LSM or CLI?

    • Updated:
    • 29 Dec 2017
    • Product/Version:
    • TippingPoint IPS N-series All
    • TippingPoint IPS NX-series All
    • TippingPoint IPS S-series All
    • TippingPoint NGFW All
    • TippingPoint SecBlade All
    • TippingPoint TPS All
    • TippingPoint TX-Series All
    • TippingPoint Virtual TPS All
    • Platform:
Summary
This article addresses the steps required to view the status of a particular filter via the Local Security Manager (LSM) or Command Line Interface (CLI).
Details
Public

Command Line Interface (CLI):

The command show filter <filter numberwill display the status of the filter designated by filter number.

For example, to display the status for filter 7120 use the following command: # show filter 7120


7120: TCP: Segment Overlap With Different Data, e.g., Fragroute
1 instances found:
Default Security Profile Config: Enabled AFC: Enabled Category: Block / Notify
Exception(s): Source: 192.168.10.10Dest: 0.0.0.0/0


The information displayed shows that filter 7120 is for "Segment Overlap With Different Data" and it is Enabled on the Default Security Profile.

IPS Local Security Manager (LSM):

  1. Click on IPS > Security Profiles, on the left navigation bar.
  2. On the Security Profile window, click on the Profile that is to be to searched.
  3. On the Edit Security Profile window, click on the Search All Filters button.
  4. On the Search Filters window, enter the one or more of the following:
    • Keyword(s): for filter name search
    • Filter #: for filter number search
    • Filter State: to search within Any, Enabled or Disabled filters
    • Filter Control: to search within Any, Category Settings or Override filters
    • Categories: option to search within a selected category or categories
    • Action Set: option to search within a selected action set or action sets
    • Protocol: option to search within a selected protocols
    • Severity: option to search within a selected severities
  5. Once the search criteria have been set, click on "Search".
    • The results will be displayed below under "Filter List".
    • The status of the filter for this profile is listed in the "State" column.

TPS Local Security Manager (LSM):

  1. Click on Policy > Profiles > IPS, on navigation bar.
  2. On the IPS Profile window, double-click on the Profile that is to be to searched.
  3. Select the IPS Filter Overrides tab and click Search.
  4. On the IPS Filter Search window, enter the one or more of the following:
    • Keyword(s): for filter name search
    • Filter #: for filter number search
    • Filter State: to search within Any, Enabled or Disabled filters
    • Filter Control: to search within Any, Category Settings or Override filters
    • Categories: option to search within a selected category or categories
    • Action Set: option to search within a selected action set or action sets
    • Protocol: option to search within a selected protocols
    • Severity: option to search within a selected severities
  5. Once the search criteria have been set, click on "Search".
    • The results will be displayed below under "Filter List".
    • The status of the filter for this profile is listed in the "State" column.
Premium
Internal
Rating:
Category:
Configure; Troubleshoot; Deploy
Solution Id:
TP000098750
Feedback
Did this article help you?

Thank you for your feedback!

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.

If you need additional help, you may try to contact the support team. Contact Support


To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.