cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1586
Views
0
Helpful
3
Replies

Deny IP due to Land Attack from 0.0.0.0 to 0.0.0.0

andre.harasim
Level 1
Level 1

Hi guys...

I'm getting the attached messages at my ASA5510-K8 (Cisco Adaptive Security Appliance Software Version 7.2(2)). Could somebody tell me what is the recommended action?

Thanks a lot,

André

3 Replies 3

pengfang
Level 1
Level 1

Hi you might try "ip audit" which is basic IPS can prevent very limited attacking.

ip audit name INFO info action alarm

ip audit name ATTACK attack action drop

ip audit interface outside INFO

ip audit interface outside ATTACK

Hi, thanks for your assistance pengfang... but it seems that the ASA was mis-configured ;-)

Curious what the misconfiguration was?

Review Cisco Networking products for a $25 gift card