How to defend Nmap

[zhaobaoyue]

Hi,

I know that Nmap is a scan software. It is useful for administrators to monitor networks. But on the other side, for an intrunder can also uses this software to scan my network and servers. How to defend this on network devices, include routers and switches.

[ROBERTO TACCON]

Maybe the only 'sane' solutions is to activate the IOS IPS function where possible (on router and switches) but depends on the platform you have and you must check the Signature Definintion Files (SDF):

http://www.cisco.com/warp/public/732/Tech/security/intrusion/

or use an IPS network module and/or appliance

http://www.cisco.com/en/US/products/hw/vpndevc/ps4077/index.html

Bye.