Simple IPS Normalizer question :) Sig 1301/1304, IDS 6.0(3)

Unanswered Question
Jan 16th, 2008

Why don't signatures 1301 and 1304 produce alert even if "Produce Alert" event-action is specified for those signatures (promisc. mode)?

Is it possible to send RST or shun a connection in promisc. mode when those signatures fire?

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.

Actions

This Discussion