11-30-2009 12:21 PM - edited 03-10-2019 04:50 AM
I would like to make a simple custom signature that will count all of the syn requests from the internet towards an internal class C network on a particular destination port.
Which engine should we use and how should the signature be configured?
03-10-2014 01:10 AM
I would recommend you the below custom signature guide
http://www.cisco.com/web/about/security/intelligence/ips_custom_sigs.html
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide
Log in to Community