Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

Deny IP due to Land Attack from 0.0.0.0 to 0.0.0.0

Hi guys...

I'm getting the attached messages at my ASA5510-K8 (Cisco Adaptive Security Appliance Software Version 7.2(2)). Could somebody tell me what is the recommended action?

Thanks a lot,

André

3 REPLIES
New Member

Re: Deny IP due to Land Attack from 0.0.0.0 to 0.0.0.0

Hi you might try "ip audit" which is basic IPS can prevent very limited attacking.

ip audit name INFO info action alarm

ip audit name ATTACK attack action drop

ip audit interface outside INFO

ip audit interface outside ATTACK

New Member

Re: Deny IP due to Land Attack from 0.0.0.0 to 0.0.0.0

Hi, thanks for your assistance pengfang... but it seems that the ASA was mis-configured ;-)

New Member

Re: Deny IP due to Land Attack from 0.0.0.0 to 0.0.0.0

Curious what the misconfiguration was?

556
Views
0
Helpful
3
Replies