cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1564
Views
0
Helpful
3
Replies

Deny IP due to Land Attack from 0.0.0.0 to 0.0.0.0

andre.harasim
Level 1
Level 1

Hi guys...

I'm getting the attached messages at my ASA5510-K8 (Cisco Adaptive Security Appliance Software Version 7.2(2)). Could somebody tell me what is the recommended action?

Thanks a lot,

André

3 Replies 3

pengfang
Level 1
Level 1

Hi you might try "ip audit" which is basic IPS can prevent very limited attacking.

ip audit name INFO info action alarm

ip audit name ATTACK attack action drop

ip audit interface outside INFO

ip audit interface outside ATTACK

Hi, thanks for your assistance pengfang... but it seems that the ASA was mis-configured ;-)

Curious what the misconfiguration was?

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: