Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Can I get alerted if my router is hit with a DoS or Scan?

Hi,

I have a Cisco 877. I have IPS installed and mondered how or if I could be alerted when it's constantly scanned by an external IP?

I have seen my syslog server fill up with deny's from external IP's and wondered if I can be notified, or is it regarded as the router is doing it's job so don't worry?

Thanks in advance for your info

1 REPLY
New Member

Re: Can I get alerted if my router is hit with a DoS or Scan?

Hi,

Not sure if this works on an 877 (I don't have one) but this might be a good start:-

http://blog.ioshints.info/2007/11/send-e-mail-when-interface-goes-down.html

You'll need to change the syslog pattern to something more appropriate.

102
Views
0
Helpful
1
Replies