Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

pix alarm

I would like to know the use of these commands on pix:

ip audit info action alarm

ip audit attack action alarm

What does the key word `Alarm` signify in both these statements, what is the effect of the `alarm option` when a security breach occurs ?

Regards,

Mahe

1 REPLY
Bronze

Re: pix alarm

Hi, these lines are for the IDS feature in the PIX. The "ip audit attack" command specifies the default actions to be taken for attack signatures. The "ip audit info" command specifies the default action to be taken for signatures classified as informational signatures. The "alarm" option indicates that when a signature match is detected, the PIX reports the event to the configured syslog servers.

Hope that helps.....

95
Views
0
Helpful
1
Replies
CreatePlease to create content