Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

Admin/NIMDA virus

do we have any patch/solutions for this type of virus?

3 REPLIES
New Member

Re: Admin/NIMDA virus

The CIDS sensor will fire signatures based on nimda activity. Also, the Cisco Host Based Sensor will stop nimda cold in in it's tracks and protect your key IIS or Apache servers.

New Member

Re: Admin/NIMDA virus

There was some discussion before about allowing the evaluation of the Host Based IDS systems. Is this available yet?

New Member

Re: Admin/NIMDA virus

Hi,

We have a lab that behaves as a internet customer pod with Cisco Network and Host based IDS.

Both picked up the attacks. the Sensor picked it up as a rapid increase in HTTP port 80 signatures for multiple IIS vunerbilites and the Host based software recognised it and blocked it running in protect mode.

Directory Traversal and double directory traversal were the signatures that gave this away.

Inti.

192
Views
0
Helpful
3
Replies