[c-nsp] ASA 5520 Newbie Question

[Christian Koch]

most ids/ips will have signatures for detecting port scans.

im unsure the asa syslogs anything of the sort as i've never seen one
before, someone else may have a better answer for that



On Wed, Jun 25, 2008 at 4:29 PM, Jarrod Friedland <
jarrod.friedland at gmail.com> wrote:

> Morning All
>
> Quick Question, within the standard ASA 5520 box, what is the best way to
> fire off a notification that the box is being port scanned by a specific
> ip.
> Would you require third party application for this or is ASDM / the ASA
> itself capable of such notifications. Are we able to make use of CiscoWorks
> for this type of notification from the ASA devices.
>
> Any info would be greatly appreciated.
>
> Thanks
>
> --
>
> --
> Jarrod
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
>