How do I interpret PIX IDS errors

[thinkgreen]

Hi All

As an example I got this error: "IDS:6053 DNS all records request."

Where can I find out exactly what this and other IDS messages means and what are the ramifications of them and if possible the corrective measures.

Peace

Roy

[gfullage · Accepted solution]

The "6053" in this message (and all IDS type messages in the PIX) is the signature number. You can check out what it means by looking at the Network Security Database (NSDB) here:

http://www.cisco.com/cgi-bin/front.x/csec/idsAllList.pl

Note that the PIX doesn't check for all these signatures, only a small subset of them in fact.

[thinkgreen]

Thanks..just what the doctor ordered.

Peace Roy