07-21-2011 12:08 AM - edited 03-11-2019 02:01 PM
Hi Netpro Team,
we have cisco asa 5510 where ips module is installed. i have given the event action rule as "deny", when i do this, the attacks destined to victim port 80 is getting denied and logged, but attack to victim port 0 does not show any action in the logs....i checked this in ips manager as well as in idm event logs.
for eg:- signature 5930/13 is fired and it denied the attacker on victim port 80 and showing the action as denied, then im getting the next same signature fired for victim port 0, but action is now showing...
somebody pls reply...........................!!!!!!!!!
07-21-2011 03:40 AM
Hi Team,
I am unable to see the action taken and showing the victim port as zero for all the tuned signatures in ips... I really do not know if the attack is being blocked or still allowed... Need your intervention as soon as possible please..
im using sig IPS-sig-S576-req-E4. can somebody really revert please...
07-21-2011 11:35 AM
Hellow,
Can someone from Cisco revert pls.....!!!
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide