cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
282
Views
0
Helpful
2
Replies

cisco asa ips issue..

secureIT
Enthusiast
Enthusiast

Hi Netpro Team,

we have cisco asa 5510 where ips module is installed. i have given the event action rule as "deny", when i do this, the attacks destined to victim port 80 is getting denied and logged, but attack to victim port 0 does not show any action in the logs....i checked this in ips manager as well as in idm event logs.

for eg:- signature 5930/13 is fired and it denied the attacker on victim port 80 and showing the action as denied, then im getting the next same signature fired for victim port 0, but action is now showing...

somebody pls reply...........................!!!!!!!!!

2 Replies 2

secureIT
Enthusiast
Enthusiast

Hi Team,

I am unable to see the action taken and showing the victim port as zero for all the tuned signatures in ips... I really do not know if the attack is being blocked or still allowed... Need your intervention as soon as possible please..

im using sig IPS-sig-S576-req-E4. can somebody really revert please...

Hellow,

Can someone from Cisco revert pls.....!!!

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Recognize Your Peers