< Home

display ips signature-state

Function

The display ips signature-state command displays the state of predefined signatures.

Format

display ips signature-state

Parameters

None

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

None

Example

# Enable all predefined signatures, disable predefined signature 12345, and then commit the changes. After that, disable predefined signature 54330 without committing the change. Then, view the state of all predefined signatures.

<sysname> system-view
[sysname] ips signature-state enabled
Warning: All predefined signatures will be enabled. Continue? [Y/N]:Y
[sysname] ips signature-state signature-id 12345 disabled
[sysname] engine configuration commit
[sysname] ips signature-state signature-id 54330 disabled
[sysname] display ips signature-state
 --------------------------------------------------------------------
  Global    : enabled                                                
  Count     : 2                                                      
  Committed : not committed                                          
 --------------------------------------------------------------------
  Signature-ID    Configured-State    Default-State    Committed     
 --------------------------------------------------------------------
  54330           disabled            enabled          not committed
  12345           disabled            enabled          committed 
Table 1 Description of the display ips signature-state command output

Item

Description

Global

Default state for all predefined signatures can be either of the following:

  • enabled: Predefined signatures are enabled by default.

  • disabled: Predefined signatures are disabled by default.

  • non-configured: The default state of predefined signatures is not configured.

To set the default state for all predefined signatures, run ips signature-state { enabled | disabled }. If the default state is not specified, the state will be non-configured.

Count

Number of predefined signatures with changed state.

Committed

Whether all state changes are committed:

  • committed: All state changes are committed.

  • not committed: Not all state changes are committed.

Signature-ID

ID of a predefined signature.

Configured-State

New state of a predefined signature:

  • enabled: A predefined signature is enabled.

  • disabled: A predefined signature is disabled.

To change the state of a predefined signature, run ips signature-state signature-id signature-id { enabled | disabled }.

Default-State

State of predefined signatures in the IPS signature database:

  • enabled: A predefined signature is enabled.

  • disabled: A predefined signature is disabled.

  • retired: A predefined signature is deprecated.

A predefined signature marked with retired is deprecated and retained only for checking the history of signatures.

Committed

Whether the state change of a predefined signature is committed:

  • committed: The state change is committed.

  • not committed: The state change is not committed.

Copyright © Huawei Technologies Co., Ltd.
Copyright © Huawei Technologies Co., Ltd.
< Previous topic Next topic >