Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
I am having a problem understanding how a packet is going to know that it needs to get evaluated by the IDSM if it is being sent to a host on a different vlan. First lets say that the server is on a vlan that is being pair and the server host is conf...
Absolutely, here is one for you, http://www.intersectalliance.com/projects/SnareBackLog/index.htmlThey sell a full blow one but I don't know how it is we use Cisco MARS to do event correlations.Heres the snmp link you need.http://cco/en/US/products/h...
I would recommend using a exploit utility to determine if the system is actively blocking/alerting. I have used metasploit in the past using the realvnc buffer overflow to inject a paylod and the idsm-2 have stopped it. You verify that it was stopped...
Hope this helps. We run ECLB with inline vlan pair mode. Heres a link to the manual and a link to my orginally posted question, that I figured out.http://www.cisco.com/en/US/products/hw/vpndevc/ps4077/products_configuration_guide_chapter09186a008055d...
