The 5.0(6) and corresponding 5.1(1c) compatibility repackage have been posted in the usual Cisco download space. NOTE: Signature update S220 has been posted to bring all other systems up to date with the signature level built-in into 5.0(6). Sign...
I'm not about to start speaking for the signature team here at Cisco, but you can "sometimes" do something with encrypted data. Cisco IPS has had (technically still does) signatures that are based on traditional cryptographic traffic analysis. A pa...
Sunil,The IPS appliance supports an "on-a-stick" mode (officially known as Inline VLAN Pair Mode). You can have two logical links on a single physical link, where the logical links are separated by Vlan tags. The physical link is set up as an 802.1...
Hi guys,I'd like the second the request for which normalizer sig is causing issues. We have seen sporadic occurances of this situation and we are trying to get a handle on the issue.Thanks,Scott CothrellIPS Engineering
Also, I noted that your alarm dump showed two 10. sources attacking a single 192. victim, so consider that your remote site probably has a larger problem than just a single box.Hope this doesn't ruin your holidays...SC
