cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Bookmark
|
Subscribe
|
523
Views
5
Helpful
1
Replies

Detection of Scanning

Jhun Banzuela
Level 1
Level 1

Hi,

 

Question 1:

From which signature in reconnaissance can detect scanning such as nmap or qualys.?

I performed scan but none is detected. I think it is not just enabled.

 

Question 2:

I may allow scanning from time to time but with source address defined.

How can I whitelist an IP for scanning purpose.?

 

Regards,

Jhun

1 Reply 1

Ravi Singh
Level 7
Level 7

You can use the below signature to detect NMAP

https://intellishield.cisco.com/security/alertmanager/ipsSignature?signatureId=3046&signatureSubId=0

Review Cisco Networking for a $25 gift card