IDSM 6000 module... Blocking??

[cfowler]

Has anyone used the IDS module for the 6000? I have it installed but all it will do is monitor. It does no blocking. They just released 3.0 for this module, does this support blocking and if so how and what forms of blocking will it do?

Thanks,

Chris Fowler

[albadger]

Are you using CSPM to manage the sensor? If so, you can configure blocking from CSPM - see http://www.cisco.com/univercd/cc/td/doc/product/ismg/policy/ver22/config/nwdevs.htm#xtocid2325713

[lathem]

There are two response actions in the IDS products: Shunning and TCP resets.

Shunning is supported by both the appliance and the module in the 3.0 release. TCP resets are not supported in the module, only the appliance.