topic Re: manual blocking using IDS in Network Security

manual blocking using IDS

teru-lei — Sun, 10 Mar 2019 09:42:22 GMT

Hi All,

I tried to use IDS to block traffic. I have configured the logical device and add the blocking router with all passwords, but after I configured the blocking, the IDS did not apply acl to the router... Just don't know which step is wrong.

And I can not find somewhere in IDS to monitor which equipment has applied the blocking... Can anybody give me some ideas? Thank You!

Best Regards

Teru Lei

Re: manual blocking using IDS

jlively — Fri, 21 Oct 2005 00:55:36 GMT

How did you configure the sensor? Did you use the cli? If so, do a show statistics network-access. You will see the current status of the connection and any active blocks. Look for the word "active" for the router. You said you set up the logical device and the router. Did you also set up and interface on the router?

Re: manual blocking using IDS

teru-lei — Fri, 21 Oct 2005 05:16:14 GMT

Thank you! I use GUI to config the IDS. I will check my config again

Re: manual blocking using IDS

jlively — Fri, 21 Oct 2005 12:55:53 GMT

go to the monitoring tab and make sure the blocks are listed. Go to the blocking config and router interfaces. Still a good bet to go to the cli and check stats there.