topic Re: recommended solution for ARP packet in Network Security

Re: recommended solution for ARP packet

praprama — Thu, 21 Oct 2010 13:33:34 GMT

Hi,

I noticed you have a similar question posted on the Firewall community as well. On the IPS unfortunately, there is no such way of doing such a thing if we are indeed referring to the same syslog message.

Thanks and Regards,

Prapanch

Re: recommended solution for ARP packet

Panos Kampanakis — Thu, 21 Oct 2010 17:54:51 GMT

You can use arp access-list on the switch, or you can use dhcp snooping.

For the ASA you can use arp inspection in transparent firewall (it will not block an arp though).

I hope it helps a little.

Re: recommended solution for ARP packet

zakid — Fri, 22 Oct 2010 14:54:36 GMT

HI team,

sorry for that, reason, little bit confusing where to post. later i decided and noticed and moved this threat to firewall community.

regards,

Re: recommended solution for ARP packet

zakid — Fri, 22 Oct 2010 14:57:15 GMT

hi team,

I am little bit confused about the solution.

My firewall is used in route mode.

if we clear little bit, much appriacted.

regards,

Re: recommended solution for ARP packet

praprama — Fri, 22 Oct 2010 15:01:22 GMT

Hi,

In routed mode unfortunately there is no way to do that. Please post the exact syslog message you are getting.

Thanks and regards,

Prapanch