Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Detection of Scanning

Hi,

 

Question 1:

From which signature in reconnaissance can detect scanning such as nmap or qualys.?

I performed scan but none is detected. I think it is not just enabled.

 

Question 2:

I may allow scanning from time to time but with source address defined.

How can I whitelist an IP for scanning purpose.?

 

Regards,

Jhun

1 REPLY
Cisco Employee

You can use the below

You can use the below signature to detect NMAP

https://intellishield.cisco.com/security/alertmanager/ipsSignature?signatureId=3046&signatureSubId=0

45
Views
5
Helpful
1
Replies
CreatePlease login to create content