W32.Blaster.Worm and High cpu utilization

Unanswered Question
Aug 13th, 2003
User Badges:

Attack of blaster.worm from lan cause router's cpu utilization reaches 70%-80%, besides intalling patches on affected pcs, is there any other work around on cisco router or switch to filter such viruses?


  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
zhuangyr Thu, 08/14/2003 - 17:01
User Badges:

you can add ACL to deny these traffic,such as

access-list 110 deny tcp any any eq 135

access-list 110 deny udp any any eq 135

access-list 110 deny tcp any any eq 139

access-list 110 deny udp any any eq 139

access-list 110 deny tcp any any eq 445

access-list 110 deny udp any any eq 139

access-list 110 deny tcp any any eq 593

zhang-hao Thu, 08/21/2003 - 19:55
User Badges:

Thanks, new worm was found then.

Cisco Security Notice: Nachi Worm Mitigation Recommendations

Actions

This Discussion