CSA Rule for Port Scan

[aminhassanali]

Hi,

I am using CSA 4.5. I want to disable and log if some one tries to scan open ports to my Server installed with CSA agent. I want to know the exact rule which will block and log the port scan activity to my server (which will be easily done by NMAP).

Please note i have a group in Test Mode.

Regards

Amin

[froggy3132000]

Create a new rule and add it to your policy

[ADEL ABOUCHAEV]

Having one test mode group in your configuration, will make the whole policy test mode.