recommended solution for ARP packet

[zakid]

hi folks,

I want to deny or block,   an ARP packet received in cisco firewall. I have cisco IPS enabled in front of firewall.

can any one guide me.

regards,

basha.

[praprama]

Hi,

I noticed you have a similar question posted on the Firewall community as well. On the IPS unfortunately, there is no such way of doing such a thing if we are indeed referring to the same syslog message.

Thanks and Regards,

Prapanch

[Panos Kampanakis]

You can use arp access-list on the switch, or you can use dhcp snooping.

For the ASA you can use arp inspection in transparent firewall (it will not block an arp though).

I hope it helps a little.

PK

[zakid]

hi team,

I am little bit confused about the solution.

My firewall is used in route mode.

if we clear little bit, much appriacted.

regards,

[praprama]

Hi,

In routed mode unfortunately there is no way to do that. Please post the exact syslog message you are getting.

Thanks and regards,

Prapanch

[zakid]

HI team,

sorry for that, reason, little bit confusing where to post. later i decided and  noticed and moved this threat to firewall community.

regards,