Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Blocking OS detection

Hello everyone,

Is there a way to protect against operating system detection using Cisco PIX similar to "mangle" feature of IPTables that allows modification of response packets from the server behind the firewall to imitate some other operating system?

If not "mangle", are there any other ways of blocking against this detection type?

Any help would be greatly appreciated.

Thanks.

Clone

1 REPLY
Silver

Re: Blocking OS detection

What version code are your running? 6.X or 7.X?

6.X has some application inspection (fixup) that masks banner info but very limited.

7.X has application inspection for some well known ports. You can use regular expressions to match specific traffic and mask out there response.

7.x Application inspection:

http://www.cisco.com/en/US/customer/docs/security/asa/asa72/configuration/guide/inspect.html

Thanks,

Chad

99
Views
0
Helpful
1
Replies