cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
381
Views
3
Helpful
1
Replies

ACLS to stop viruses

cyberpete
Level 1
Level 1

Microsoft is actively analyzing and providing guidance on a malicious worm identified as “Worm:Win32/Zotob.A”, which is currently circulating on the Internet. The worm is a malicious attack which exploits the Windows Plug and Play vulnerability addressed in Microsoft Security Bulletin MS05-039 on August 9, 2005. Does anyone know of any Cisco Security Advisories showing how to protect against this using Cisco Access lists? Any pointers gratefully recieved

Peter

1 Reply 1

a.paradis
Level 1
Level 1

Hi,

Zotob mainly attacks using port 445, so if this port is filtered by your access-list, you should be well protected.

Regards,

Alex