Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Community Member

W32.Blaster.Worm and High cpu utilization

Attack of blaster.worm from lan cause router's cpu utilization reaches 70%-80%, besides intalling patches on affected pcs, is there any other work around on cisco router or switch to filter such viruses?

3 REPLIES
Community Member

Re: W32.Blaster.Worm and High cpu utilization

you can add ACL to deny these traffic,such as

access-list 110 deny tcp any any eq 135

access-list 110 deny udp any any eq 135

access-list 110 deny tcp any any eq 139

access-list 110 deny udp any any eq 139

access-list 110 deny tcp any any eq 445

access-list 110 deny udp any any eq 139

access-list 110 deny tcp any any eq 593

Community Member

Re: W32.Blaster.Worm and High cpu utilization

Hi,

I just got this from Cisco that will point you in the right direction.

Title: Cisco Security Notice: W32.BLASTER Worm Mitigation Recommendations

URL: http://www.cisco.com/warp/customer/707/cisco-sn-20030814-blaster.shtml

(available to registered users)

http://www.cisco.com/warp/public/707/cisco-sn-20030814-blaster.shtml

(available to non-registered users)

Posted: August 13, 2003

Community Member

Re: W32.Blaster.Worm and High cpu utilization

Thanks, new worm was found then.

Cisco Security Notice: Nachi Worm Mitigation Recommendations

141
Views
0
Helpful
3
Replies
CreatePlease to create content