08-05-2008 10:02 PM - edited 03-10-2019 04:14 AM
Hi Team,
Is that possible to block traffics based on Source and destination in Cisco IPS 4200 series sensor.
IPS is installed in promiscous mode.
regars
Rajesh
08-06-2008 01:45 AM
Does anyone have answer to my query
08-06-2008 08:36 AM
yes, you can "shun" to a cisco firewall (PIX or ASA) or a cisco router. In both cases the IDS sensor will populate an ACL to block your attacker. You need to have some signatures action set to "shun" and of course enter the router/firewall information (IP, username, password) into your sensor.
08-07-2008 04:00 AM
Could you explain me.
08-07-2008 10:10 AM
Here's a good configuration guide to shunning with a 4200 series IPS sensor and a router.
Here are some other useful IPS config guides:
http://www.cisco.com/en/US/products/hw/vpndevc/ps4077/prod_configuration_examples_list.html
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: