intrusion detection on pix501

[travis0]

Hello,

I am running PIX501 and have a few ports statically mapped to a server behind the firewall. Also, vpn service is running too. I would like to know if I can detect unauthorized activities on the outside of my firewall. I want to monitor if someone has been trying to hack their way in, at the pix.

can the pix501 do this/

thank you,

travis,

[travis-dennis_2]

Hello Travis , this is Travis,

Yes the PIX 501 can do limited Intrusion Detection.

http://googleweb-1.cisco.com/search?q=cache:http://cco-rtp-1.cisco.com/en/US/customer/products/hw/vpndevc/ps2030/products_data_sheet09186a0080091b18.html+PIX%2C+501%2C+IDS&ie=UTF-8&site=CDC&output=xml_no_dtd&client=CDC&proxystylesheet=CDC&oe=UTF-8

[travis0]

Travis,

How do you enable this function on the pix?

thanks,

travis,

[steve.barlow]

The commands are 'ip audit ..'.

See link for details: http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_62/cmdref/gl.htm#1027034

For the signatures see: http://www.cisco.com/en/US/products/sw/secursw/ps2120/products_system_message_guide_chapter09186a008008966a.html#18407

Hope it helps.

Steve