OS Fingerprint

[alatzas]

Is there a clear cut way to block applications (such as nmap) from performing a fingerprint and determining the device is a cisco router/switch?

Pete

[Patrick Iseli]

No, you cannot change that behavior because the nmap OS Fingerprint is based on TCP/IP stack characteristics how the devices responds and this is not configurable in a Cisco device.

The only way would be to place an IPS that would block the attckers source or the responses. But remember that blocking (Shunning) is quiet dangerous because it is also easy to forge the source IP.

sincerely

Patrick

[alatzas]

Thanks... I wasnt sure if i could block certain things that NMAP looks for but i guess not.

Pete