Firewall software enhancement suggestion

Discussion in 'Cisco' started by ultimotion@gmail.com, Nov 29, 2005.

  1. Guest

    I manage an Internet facing PIX firewall for an external customer which
    logs all denied traffic for later analysis. Thus, I see that a high
    percentage of the denied traffic is repetitive scans either for
    destination ports with known vulnerabilities, or just general port
    scans. My suggestion is to add a shun operation to the access-list
    command similar to the existing permit and deny operations. e.g.

    /* shun any IP that attempts to connect to tcp/139 */
    access-list outside_access_in shun tcp any any netbios-ssn
    /* shun any IP that attempts to connect to an IP not assigned to a
    server */
    access-list outside_access_in shun tcp any object-group unassigned_IPs
    any
     
    , Nov 29, 2005
    #1
    1. Advertising

Want to reply to this thread or ask your own question?

It takes just 2 minutes to sign up (and it's free!). Just click the sign up button to choose a username and then you can ask your own questions on the forum.
Similar Threads
  1. Chris Harper

    ie text enhancement

    Chris Harper, Oct 28, 2003, in forum: Computer Support
    Replies:
    4
    Views:
    497
    ┬░Mike┬░
    Oct 28, 2003
  2. Roland Karlsson

    Photo Enhancement Software - PhotoViz

    Roland Karlsson, Nov 14, 2004, in forum: Digital Photography
    Replies:
    6
    Views:
    301
    PhotoViz
    Nov 14, 2004
  3. SS

    Best software for image enhancement?

    SS, Jun 8, 2007, in forum: Digital Photography
    Replies:
    2
    Views:
    1,006
    babaloo
    Jun 9, 2007
  4. SS

    Enhancement software

    SS, Sep 21, 2007, in forum: Digital Photography
    Replies:
    4
    Views:
    475
    Matt Ion
    Sep 23, 2007
  5. egfryew9

    Image Enhancement Software... Cool Freeware

    egfryew9, Mar 10, 2008, in forum: Digital Photography
    Replies:
    2
    Views:
    413
    Disco Dancer
    Mar 10, 2008
Loading...

Share This Page