To detect pc infected by viruses on switch/router..

[cindylee27]

Hi,

I have a layer 2 switch 2950, and a router 2811, can I know if there is virus attack on one PC (IP: 10.33.33.1) i will be able to know where it coming from?

My customer basically wanna to pin down the PC who is being infected.

Thanks.

[Jan Nejman]

Hello,

you may try out our product Caligare Flow Inspector. On the router you can configure NetFlow export and out software is able to detect network anomalies (one of the module detect network worm). Network anomalies detection is using heuristics, so it can detect new viruses and attacks. Some well-known attacks detections are build in. You may use free version (only for non-commerce) or TRIAL version (30 days).

Bye,

Jan

[ahmednaas]

You best choice in this case is to use a UMT (Unified Threat Management) device such as the Cisco ASA or the Fortinet Fortigate series.

[jwjorgensen]

CS-MARS