monitoring ids alarms connecting to a non-standard port on the HTTP proxy
Our company monitors the internal network for alarms that egress the network to the Internet domain. The internal sensor needs to track all alarms that have a destination of the HTTP proxy server. This proxy Server uses a non-standard destination port to which company users must connect in order to browse on the Internet. Should this port be specified some where in the configuration of the IDS MDC?
What are IDS 3 settings And IDS 4 settings?
Should the non-standard port be specified amongst the settings under IDS 3 global parameters?
Table of ContentsIntroductionVersion HistoryPossible Future
UpdatesDocuments PurposeNAT Operation in ASA 8.3+ SectionsRule Types
Network Object NATTwice NAT / Manual NATRule Types used per SectionNAT
Types used with Twice NAT / Manual NAT and Network Obje...
Table of Contents Introduction:This document describes details on how
NAT-T works. Background: ESP encrypts all critical information,
encapsulating the entire inner TCP/UDP datagram within an ESP header.
ESP is an IP protocol in the same sense that TCP an...