523
Views
5
Helpful
1
Replies
Detection of Scanning
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
04-15-2014 07:53 PM - edited 03-10-2019 06:11 AM
Hi,
Question 1:
From which signature in reconnaissance can detect scanning such as nmap or qualys.?
I performed scan but none is detected. I think it is not just enabled.
Question 2:
I may allow scanning from time to time but with source address defined.
How can I whitelist an IP for scanning purpose.?
Regards,
Jhun
Labels:
- Labels:
-
IPS and IDS
1 Reply 1
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
04-16-2014 01:14 PM
You can use the below signature to detect NMAP
https://intellishield.cisco.com/security/alertmanager/ipsSignature?signatureId=3046&signatureSubId=0
