×

Warning message

  • Cisco Support Forums is in Read Only mode while the site is being migrated.
  • Cisco Support Forums is in Read Only mode while the site is being migrated.

Marketing.


But really -- its the ability to do deterministic analysis of a packet or packets against a reference context. So the engine understands what SNMP traffic should look like, if it sees things that that are travelling on port 161/udp that are not formatted as it believes it should be -- it will alarm. As opposed to taking each packet, and comparing it against a list of known signatures and alerting on a match.


-brkn!

Actions

This Discussion