topic Prevent Network Scanning in Network Security https://community.cisco.com/t5/network-security/prevent-network-scanning/m-p/1729736#M64929 <P>Hye,</P><P></P><P>I am using an AIP-SSM 10. I wish to block block Network Scanning. Is there a way to allow certain <EM>Hosts</EM> to scan the network without putting them in the <STRONG><EM>Never To Block Addresses List</EM></STRONG> ?</P><P></P><P>Thanks for your help.</P> Sun, 10 Mar 2019 12:23:30 GMT Bethuelle 2019-03-10T12:23:30Z Prevent Network Scanning https://community.cisco.com/t5/network-security/prevent-network-scanning/m-p/1729736#M64929 <P>Hye,</P><P></P><P>I am using an AIP-SSM 10. I wish to block block Network Scanning. Is there a way to allow certain <EM>Hosts</EM> to scan the network without putting them in the <STRONG><EM>Never To Block Addresses List</EM></STRONG> ?</P><P></P><P>Thanks for your help.</P> Sun, 10 Mar 2019 12:23:30 GMT https://community.cisco.com/t5/network-security/prevent-network-scanning/m-p/1729736#M64929 Bethuelle 2019-03-10T12:23:30Z Prevent Network Scanning https://community.cisco.com/t5/network-security/prevent-network-scanning/m-p/1729737#M64930 <HTML><HEAD></HEAD><BODY><P>You should be careful when blocking the scanning signaturea, these can be easily triggered by simple things like a web browser fetching multiple elements to construct a web page.</P><P>If you want to allow you network scanner to remain unblocked you should look at Event Action Overrides and Event Action Filters:</P><P><A class="jive-link-external-small" href="http://www.cisco.com/en/US/partner/docs/security/ips/7.1/configuration/guide/cli/cli_event_action_rules.html">http://www.cisco.com/en/US/partner/docs/security/ips/7.1/configuration/guide/cli/cli_event_action_rules.html</A></P><P></P><P>- Bob</P></BODY></HTML> Tue, 28 Jun 2011 18:03:42 GMT https://community.cisco.com/t5/network-security/prevent-network-scanning/m-p/1729737#M64930 rhermes 2011-06-28T18:03:42Z