Sign In with your
Trend Micro Account
Need Help?
Need More Help?

Create a technical support case if you need further support.

How to check specific filter status via the LSM or CLI?

    • Updated:
    • 11 Jun 2020
    • Product/Version:
    • TippingPoint IPS N-series All
    • TippingPoint IPS NX-series All
    • TippingPoint IPS S-series All
    • TippingPoint TPS All
    • TippingPoint Virtual TPS All
    • Platform:
Summary
Hot to check Trend Micro TippingPoint IPS/TPS devices for the status of a specific filter status via the TPS/IPS Local Security Manager (LSM) interface or the Command Line Interface (CLI)
Details
Public

Command Line Interface (CLI):

 

The command show filter <filter number> will display the status of the filter designated by filter number.

 

For example, to display the status for filter 7120 use the following command: # show filter 7120


7120: TCP: Segment Overlap With Different Data, e.g., Fragroute
   1 instances found:
Default Security Profile
   Config: Enabled    AFC: Enabled    Category: Block / Notify
                           Exception(s): Source: 192.168.10.10     Dest: 0.0.0.0/0

The information displayed shows that filter 7120 is for "Segment Overlap With Different Data" and it is Enabled on the Default Security Profile.

 

IPS Local Security Manager (LSM):

  1. Click on IPS -> Security Profiles, on the left navigation bar.
  2. On the Security Profile window, click on the Profile that is to be to searched.
  3. On the Edit Security Profile window, click on the Search All Filters button.
  4. On the Search Filters window, enter the one or more of the following:
    • Keyword(s): for filter name search
    • Filter #: for filter number search
    • Filter State: to search within Any, Enabled or Disabled filters
    • Filter Control: to search within Any, Category Settings or Override filters
    • Categories: option to search within a selected category or categories
    • Action Set: option to search within a selected action set or action sets
    • Protocol: option to search within a selected protocols
    • Severity: option to search within a selected severities
  5. Once the search criteria have been set, click on "Search".
    • The results will be displayed below under "Filter List".
    • The status of the filter for this profile is listed in the "State" Column.

 

TPS Local Security Manager (LSM):

  1. Click on Policy > Profiles > IPS, on navigation bar.
  2. On the IPS Profile window, double-click on the Profile that is to be to searched.
  3. Select the IPS Filter Overrides tab and click Search.
  4. On the IPS Filter Search window, enter the one or more of the following:
    • Keyword(s): for filter name search
    • Filter #: for filter number search
    • Filter State: to search within Any, Enabled or Disabled filters
    • Filter Control: to search within Any, Category Settings or Override filters
    • Categories: option to search within a selected category or categories
    • Action Set: option to search within a selected action set or action sets
    • Protocol: option to search within a selected protocols
    • Severity: option to search within a selected severities
  5. Once the search criteria have been set, click on "Search".
    • The results will be displayed below under "Filter List".
    • The status of the filter for this profile is listed in the "State" Column.
Premium
Internal
Partner
Rating:
Category:
Configure; Troubleshoot; Deploy
Solution Id:
TP000256186
Feedback
Did this article help you?

Thank you for your feedback!

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.

If you need additional help, you may try to contact the support team. Contact Support

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.