SNMP trap if there is a connection with a specific IP

[Ronny.Makoschey]

Hello everybody,

I´ve a little question about an IPS-module in a Cisco ASA-Firewall. Is it possible, that the IPS module sends an SNMP trap in the case of a connection from a host in the LAN to a specific IP adress? Or does somebody have an other idea how to realize something like that?

Thank you very much for your help!
Best regards,
Ronny

[rhermes]

Create a custom signature in your IPS module

http://www.cisco.com/web/about/security/intelligence/ips_custom_sigs.html

or

http://www.cisco.com/en/US/docs/security/ips/5.0/configuration/guide/cli/clisgdef.html#wp1042406

and select this action when the signature fires:

–request-snmp-trap—Sends a request to NotificationApp to perform SNMP action.

- Bob