cisco asa ips issue..

[secureIT]

Hi Netpro Team,

we have cisco asa 5510 where ips module is installed. i have given the event action rule as "deny", when i do this, the attacks destined to victim port 80 is getting denied and logged, but attack to victim port 0 does not show any action in the logs....i checked this in ips manager as well as in idm event logs.

for eg:- signature 5930/13 is fired and it denied the attacker on victim port 80 and showing the action as denied, then im getting the next same signature fired for victim port 0, but action is now showing...

somebody pls reply...........................!!!!!!!!!

[secureIT]

Hi Team,

I am unable to see the action taken and showing the victim port as zero for all the tuned signatures in ips... I really do not know if the attack is being blocked or still allowed... Need your intervention as soon as possible please..

im using sig IPS-sig-S576-req-E4. can somebody really revert please...

[secureIT]

Hellow,

Can someone from Cisco revert pls.....!!!