Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Community Member

Threshold for Action

Hi All:

I would wnat to know IDSM-2 can support bellow feature

1: IDSM-2 can receive icmp until eighth packet , IDSM-2 right away block ninth icmp packet

2: If i used IEV i can per signature define when i want to receive notify message or i need used VMS

Thanks in advance

2 REPLIES
Cisco Employee

Re: Threshold for Action

Hi Emily,

Not sure about the first question. Can you elaborate on that? Are you referring to the setup where the IDSM2 is configured to block ICMP?

On the 2nd one, email notification can be done only with VMS.

Thanks,

yatin

Community Member

Re: Threshold for Action

Hi ywadhavk:

Thanks for you reponse , i want used IDSM-2 to block icmp packet , if isdm-2 receive ninth icmp packet consecutive , i will block the source IP in 6509 ( because i think the situation maybe ping of death attack) , in other word , IDSM-2 can support threshold to block source IP , when attack trigger IDSM-2 signature

98
Views
0
Helpful
2
Replies
CreatePlease to create content