topic NULL sessions (IPC$ ) in Network Security https://community.cisco.com/t5/network-security/null-sessions-ipc/m-p/1383853#M67712 <P>Hi</P><P></P><P><SPAN style="font-size: 12pt; font-family: Calibri; "></SPAN></P><P dir="ltr">Null session is not being detected by my IPS, I want to know which is the relevant signature so we could block this on IPS.</P><P dir="ltr"></P><P dir="ltr">I would apprecaite if someone can share the relevant signature....so i can block null session.</P><P dir="ltr"></P><P dir="ltr">Regards</P><P dir="ltr">Nad </P><P></P> Sun, 10 Mar 2019 11:57:00 GMT Nadeem ahmed Ahmed 2019-03-10T11:57:00Z NULL sessions (IPC$ ) https://community.cisco.com/t5/network-security/null-sessions-ipc/m-p/1383853#M67712 <P>Hi</P><P></P><P><SPAN style="font-size: 12pt; font-family: Calibri; "></SPAN></P><P dir="ltr">Null session is not being detected by my IPS, I want to know which is the relevant signature so we could block this on IPS.</P><P dir="ltr"></P><P dir="ltr">I would apprecaite if someone can share the relevant signature....so i can block null session.</P><P dir="ltr"></P><P dir="ltr">Regards</P><P dir="ltr">Nad </P><P></P> Sun, 10 Mar 2019 11:57:00 GMT https://community.cisco.com/t5/network-security/null-sessions-ipc/m-p/1383853#M67712 Nadeem ahmed Ahmed 2019-03-10T11:57:00Z Re: NULL sessions (IPC$ ) https://community.cisco.com/t5/network-security/null-sessions-ipc/m-p/1383854#M67714 <HTML><HEAD></HEAD><BODY><P>Do a packet capture for your particular network and then modify then clone the existing IPS signatures related to the SMB protocol to match that particular flow.</P><P></P><P>Regards</P><P></P><P>Farrukh</P></BODY></HTML> Thu, 22 Apr 2010 14:04:35 GMT https://community.cisco.com/t5/network-security/null-sessions-ipc/m-p/1383854#M67714 Farrukh Haroon 2010-04-22T14:04:35Z