Has anyone used the Automatic Signature Extraction (ASE) on Router IOS

[saidfrh]

Has anyone used the Automatic Signature Extraction (ASE) feature of Cisco router IOS? "Cisco Automatic Signature Extraction can prevent zero-day virus attacks...

http://blogs.techrepublic.com.com/networking/?p=628&tag=nl.e115

[Giuseppe Larosa]

Hello Said,

a reference link for this feature is

http://www.cisco.com/en/US/docs/ios/security/configuration/guide/sec_auto_signa_extrt_ps6441_TSD_Products_Configuration_Guide_Chapter.html

It requires an external linux based ASE collector and the ASE sensor that can be activated on a per interface basis on ISR router(s) cannot extract signature from encrypted traffic.

Hope to help

Giuseppe