Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

NULL sessions (IPC$ )

Hi

Null session is not being detected by my IPS, I want to know which is the relevant signature so we could block this on IPS.

I would apprecaite if someone can share the relevant signature....so i can block null session.

Regards

Nad

1 REPLY

Re: NULL sessions (IPC$ )

Do a packet capture for your particular network and then modify then clone the existing IPS signatures related to the SMB protocol to match that particular flow.

Regards

Farrukh

373
Views
0
Helpful
1
Replies
CreatePlease to create content