topic Re: PIX & Enterasys Dragon in Network Security

PIX & Enterasys Dragon

ali-franks — Fri, 21 Feb 2020 07:40:42 GMT

Hi All,

Had an interesting question from a customer this morning.

They have an Enterasys Dragon IDS appliance and were wondering if it could interact with a PIX for shunning.

Anyone seen or tried this? Some input would be appreciated.

Thanks

Ali

Re: PIX & Enterasys Dragon

a.kiprawih — Sat, 16 Oct 2004 01:02:50 GMT

Hi Ali,

So far, I've never seen this kind of integration before, but as far as I am concerned, Cisco PIX can only work with Cisco IDS - proprietary issue (?).

Cheers!

Amrih

Re: PIX & Enterasys Dragon

pcomeaux — Sat, 16 Oct 2004 01:19:32 GMT

The sensor performs a SSH or Telnet connection to the Pix and uses the "Shun" command that is available in the Pix OS.

There's nothing stopping any individual or business from writing a script to accomplish this behaviour when a signature fires that is configured to block.

So, there's nothing proprietary in the method the way the Cisco IDS performs a Shun with a Pix or a Block with a Router.

Hopefully this helps,

peter

Re: PIX & Enterasys Dragon

rcorley2001 — Mon, 25 Oct 2004 16:33:03 GMT

Additionally they can control switch ports by either disabling the port or reassigning it to a different vlan depending upon your security policy.