cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1909
Views
0
Helpful
1
Replies

ASA 5512-X + IPS

Sean Haynes
Level 1
Level 1

Afternoon

I have just configured and installed an ASA 512-X to replace our aging ASA 5510.

The 5512-X comes equipped with an IPS sensor built in for which I have the license. Before I go thorough the pain of trying to figure out how it all gels together can some bright person tell if I am able through the IPS to prevent 'dictionary' style attacks on our terminal servers.

Ironically Windows Server will disable an account if a known user incorrectly enters a password 'x' number of times, but if an unknown user tries to access the terminal server it will happily allow the attack to continue until successful.

We are inundated with daily attacks from various parts of the globe, though it has to be said China and Korea are particularly testing......

....thanks in advance..

1 Reply 1

Arsen Gharibyan
Level 1
Level 1

http://www.cisco.com/en/US/docs/security/ips/5.1/configuration/guide/idm/dmSgEng.html

hello here is the topic for SNMP tweaking so it will identify Brute force attack

Review Cisco Networking for a $25 gift card