R: [c-nsp] PIX Detecting Port Scans?

[Brian Turnbow]

no port scan detection... but you can set connection limits using the static comman and you can get "connection limit exceeded"....... not the same thing but it's something.
 
Brian

________________________________

Da: cisco-nsp-bounces at puck.nether.net per conto di jbruce at unitedscience.com
Inviato: mar 14/12/2004 18.58
A: cisco-nsp at puck.nether.net
Oggetto: [c-nsp] PIX Detecting Port Scans?




Since there has been a few PIX questions lately I thought I would ask
one I have been curious about for a while. Is there a way to configure a
PIX 515 6.3(4) to detect port scans? Here is what I have so far, it only
detects ICMP packets.  I'm a newb to the PIX and any links or info would
help. Thanks

ip audit name Inbound-Attack attack action alarm
ip audit name Inbound-Info info action alarm
ip audit interface outside Inbound-Info
ip audit interface outside Inbound-Attack
ip audit info action alarm
ip audit attack action alarm

James Bruce


CONFIDENTIALITY NOTICE

This document(s) and any attachments accompanying this email transmission contain information from United Science Inc, which is confidential and privileged.  The email transmission and any attached documents are intended to be for the review and use solely of the individual(s) or entity(ies) named and listed on the email transmission message.  If you are not the intended recipient, you are hereby advised that any review, disclosure, copying, distribution or use of the information and/or contents of this email message, as well as any attached documents, is prohibited.  If you have received this email message in error, please immediately delete this email transmission and notify us by telephone of this error. Please visit us at http://www.unitedscience.com



_______________________________________________
cisco-nsp mailing list  cisco-nsp at puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/