topic Re: Block CodeRed on PIX in Network Security

Block CodeRed on PIX

vcolla — Fri, 21 Feb 2020 05:49:26 GMT

Is there any way to block Code Red worm on PIX just as it can be done on Cisco IOS?

Re: Block CodeRed on PIX

ciscomoderator — Thu, 23 Aug 2001 22:32:42 GMT

There are a number of Code Red work resources posted at http://www.cisco.com/warp/public/63/codered_index.shtml that you should find useful. I have also learned of another document that will be published shortly that discusses (among other things) the ability of stateful packet filter firewalls (i.e. Cisco PIX Firewall) to help block the adverse affects of the two versions of the worm.

In the meantime, please carefully review the documents at http://www.cisco.com/warp/public/63/codered_index.shtml and http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/MS01-033.asp

I will post again to this thread when that document is published.

Thank you for posting your question to the forum.

Re: Block CodeRed on PIX

ciscomoderator — Tue, 18 Sep 2001 22:29:31 GMT

Here is another recently published document regarding the Code Red worm worth reading.

http://www.cisco.com/warp/public/cc/so/cuso/epso/sqfr/scdam_wp.htm

Re: Block CodeRed on PIX

rstaaf — Wed, 19 Sep 2001 00:28:33 GMT

The PIX can only block by port or IP address so I don't see how you would block it without blocking access to port 80 completely.

Re: Block CodeRed on PIX

vcolla — Thu, 04 Oct 2001 18:48:59 GMT

My point exactly. I know I can do it on Cisco IOS with class-maps, but how do I do it on PIX?