Intrusion Prevention Systems/IDS

The Cisco Intrusion Prevention Systems/IDS Technical Support Forum provides access to troubleshooting, configuration, protocols, and technical resource topics for enterprise applications and Cisco Product connections. Learn more about IPS, interconnectivity planning, and information on various Cisco switching products and solutions, such as IDS manager, Cisco Intrusion Prevention System, FWSM, IDS module and ASA, IPS 4200, CMS IPS, and more!

Provide answers to questions in this community that are awaiting a correct answer.

Greetings all,I am trying to figure out which UDP port is alarming on the "AD - External UDP port scanners (13005)" signature. By default, the sign...
9 hours 16 min ago
Hi , We are having this in our FTP log.1. What signature can block this?2. Can we block the IP in time-based actions-> host block? 
2 weeks 4 days ago
Does 891FW support rogue access point detection?
3 weeks 1 day ago
We're just about completed the IPS poc at Customer.  This message is being sent to leverage our collective wisdom to close out this last remaining...
3 weeks 2 days ago
Hello GuysI am trying to install AIM-IPS-K9 on my cisco router 1841 . actually I need this only for LAP and practice for the IPS , and I am worry i...
3 weeks 4 days ago
There are no categories in this community.
Filter Results
Subject Views Votes Rating Replies Last replied by
discussion AD - External UDP port scanner - what port?
Last Reply 9 hours 16 min ago.
4 0 0.0 0 jhall0007
discussion IPS 4345 Error: Cannot communicate with mainApp (getVersion)
Last Reply 10 hours 26 min ago.
10 0 0.0 1 Pranay Prasoon
discussion Signature ID = 6043
Last Reply 1 day 20 hours ago.
11 0 0.0 1 JonPBerbee
discussion Problem Opening ASA5512-IPS from ASDM
Last Reply 2 days 10 hours ago.
20 0 0.0 3 Abdullah Almokhtar
discussion Ask the Expert on Cisco Cloud Web Security: Comprehensive Defense, Advanced Threat Protection, and Superior Flexibility for Your Business
Last Reply 3 days 7 hours ago.
333 0 0.0 2 Jessica Deaken
discussion ASA failover with different IPS module
Last Reply 5 days 8 hours ago.
18 0 0.0 3 Marvin Rhoads
discussion Cisco IPS
Last Reply 5 days 16 hours ago.
36 0 0.0 6 hindra_compnet
discussion Can an "Informational" signature be tuned to interfere with the flow of traffic?
Last Reply 1 week 3 days ago.
15 0 0.0 3 Pranay Prasoon
discussion IDSM-2 login issue
Last Reply 1 week 3 days ago.
40 0 5 7 jfloresa
discussion Cisco IPS sensor software EOL question
Last Reply 1 week 6 days ago.
17 0 0.0 1 Pranay Prasoon
discussion sourcefire ips question.
Last Reply 2 weeks 3 days ago.
31 0 0.0 1 Marvin Rhoads
discussion FTP Attack
Last Reply 2 weeks 4 days ago.
12 0 0.0 0 Jhun Banzuela
discussion ASDM - java runtime environment is not installed
Last Reply 3 weeks 2 hours ago.
131746 1 4.83333 23 jgolden@scottgr...
discussion 891FW - rogue AP detection
Last Reply 3 weeks 1 day ago.
6 0 0.0 0 valerpopovccnp
discussion ASA 5585‐X FirePOWER
Last Reply 3 weeks 2 days ago.
19 0 5 1 Marvin Rhoads
discussion where is it best to apply IPS
Last Reply 3 weeks 2 days ago.
20 0 0.0 1 chenbs
discussion IPS: traffic flow has stopped Event
Last Reply 3 weeks 2 days ago.
237 0 0.0 2 NOCSOC SSP
discussion IPS
Last Reply 3 weeks 2 days ago.
14 0 0.0 0 fawadasad1
discussion sourcefire access control policy and intrusion policy
Last Reply 3 weeks 3 days ago.
39 0 0.0 1 Richard Nazzaro
discussion Insufficient space for upgrade - IPS4345
Last Reply 3 weeks 3 days ago.
7 0 0.0 0 jhall0007
discussion IPS 7.0 on GNS3
Last Reply 3 weeks 3 days ago.
2931 2 0.0 5 ahmedelfeki
discussion signature recommendations for ASA-SSM-10
Last Reply 3 weeks 4 days ago.
30 0 0.0 2 tguadagno
discussion AIM-IPS-K9 License
Last Reply 3 weeks 4 days ago.
21 0 0.0 0 apkar1982
discussion is broadcast arp from internal network access switch can make distribution layer switch have many ports down which switch using virtual port channel
Last Reply 3 weeks 5 days ago.
11 0 0.0 0 martlee2
discussion Creating signatures in CSM
Last Reply 3 weeks 5 days ago.
0 0 0.0 1 androdri
Filter Results
Subject Views Rating Comments Author
Expert Webcast Slides: Cisco Cloud Web Security with Story Tweedie-Yates
Last Reply 1 week 2 days ago.
56
0.0
0 Lisa Latour
Sneak a Peek : Expert Webcast: Cisco Cloud Web Security with Story Tweedie-Yates
Last Reply 1 week 3 days ago.
13
0.0
0 ciscomoderator
How to disable the signature and summary events for a signature on IPS
Last Reply 2 weeks 1 day ago.
2092
0.0
0 TCC_2
Webcast Slides: Cisco Cloud Web Security with Cisco Expert, Story Tweedie-Yates
Last Reply 2 weeks 2 days ago.
1
0.0
0 ciscomoderator
Interfaces resets when signature is disabled.
Last Reply 2 weeks 2 days ago.
182
5.0
0 Anim Saxena
ASA 5515 IPS management access
Last Reply 2 weeks 2 days ago.
774
5.0
0 Anim Saxena
IPS Error: setEnableAuthenticationTokenStatus
Last Reply 2 weeks 2 days ago.
413
5.0
0 Anim Saxena
IPS-SSM10 Events not getting generated
Last Reply 2 weeks 2 days ago.
463
5.0
0 Anim Saxena
IPS Event Victim IP is 0.0.0.0
Last Reply 1 month 2 weeks ago.
279
5.0
0 Anim Saxena
Helpful show commands for IPS
Last Reply 3 months 4 weeks ago.
3946
0.0
1 athukral
How to be notified when IDS signature updates are released
Last Reply 3 months 4 weeks ago.
2826
5.0
1 TCC_2
How to create custom risk rating on the IPS
Last Reply 6 months 5 days ago.
1864
0.0
0 TCC_2
User receives the Analysis Engine is busy and unable to process during an upgrade
Last Reply 6 months 5 days ago.
5075
0.0
0 TCC_2
ASA 5550 AIP SSM-10 Question
Last Reply 6 months 5 days ago.
429
0.0
1 thannaingoo.mm
Cisco ASA-SSM-20 Analysis Engine Error
Last Reply 6 months 5 days ago.
926
5.0
0 Anim Saxena
172.16.254.254
Last Reply 9 months 3 weeks ago.
50
0.0
0 deibertmark
How to check the changes in signature behavior after signature update is performed.
Last Reply 1 year 2 weeks ago.
180
4.0
0 Raghunath Kulkarni
SDEE and IPS
Last Reply 1 year 1 month ago.
29279
4.3
1 Siddharth Chandrachud
IDSM2 Inline mode design
Last Reply 1 year 2 months ago.
3362
5.0
2 Siddharth Chandrachud
Cisco IPS Tech Tips - Introducing NGFW with IPS- 2013 Dec 19
Last Reply 1 year 3 months ago.
1598
0.0
0 Robert Albach
User receives the Error: socket connect failed IDS SSH error message when adding the ssh host-key
Last Reply 1 year 6 months ago.
1950
0.0
0 TCC_2
How to configure an SNMP trap for automatic updates on Intrusion Detection Sensor(IDS) modules (NM-CIDS)
Last Reply 1 year 6 months ago.
2214
0.0
0 TCC_2
Cisco IPS and SSL Inspection
Last Reply 1 year 7 months ago.
833
5.0
0 Anim Saxena
Cisco 2811+AIM-IPS configuration
Last Reply 1 year 8 months ago.
222
0.0
0 hakobjanyan
Cisco IPS Tech Tips - PCI planning with IPS-20130502 1501-1.mp4
Last Reply 1 year 11 months ago.
287
0.0
0 Robert Albach
Filter Results
Filter Results
Intrusion Prevention Systems/IDS
Views: 21
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Intrusion Prevention Systems/IDS
Views: 23
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Intrusion Prevention Systems/IDS
Views: 38
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Intrusion Prevention Systems/IDS
Views: 43
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Intrusion Prevention Systems/IDS
Views: 328
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Intrusion Prevention Systems/IDS
Views: 34
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Intrusion Prevention Systems/IDS
Views: 16
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Intrusion Prevention Systems/IDS
Views: 24
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Intrusion Prevention Systems/IDS
Views: 12
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Intrusion Prevention Systems/IDS
Views: 23
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Intrusion Prevention Systems/IDS
Views: 310
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (5 ratings)
Intrusion Prevention Systems/IDS
Views: 67
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Intrusion Prevention Systems/IDS
Views: 147
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Intrusion Prevention Systems/IDS
Views: 49
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Intrusion Prevention Systems/IDS
Views: 118
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 2 (1 ratings)
Intrusion Prevention Systems/IDS
Views: 299
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Intrusion Prevention Systems/IDS
Views: 333
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Filter Results

This Month

April 7th
Webcasts

Events

November 19th, 2013
Webcasts
September 13th, 2009
Ask the Expert
  • 1
  • 2
  • 3
  • 4
  • 5
December 10th, 2009
Ask the Expert
  • 1
  • 2
  • 3
  • 4
  • 5
August 29th, 2011
Ask the Expert
  • 1
  • 2
  • 3
  • 4
  • 5
May 21st, 2012
Ask the Expert
  • 1
  • 2
  • 3
  • 4
  • 5
August 27th, 2012
Ask the Expert
  • 1
  • 2
  • 3
  • 4
  • 5
January 3rd, 2013
Ask the Expert
  • 1
  • 2
  • 3
  • 4
  • 5

Actions

Login or Register to take actions
 

Popular Discussions

Popular Documents

Rank Username Points
1
rhermes
823
2
tsteger1
668
3
mhellman
603
4
Farrukh Haroon
526
5
attmidsteam
367
Rank Username Points
Marvin Rhoads
10