most ids/ips will have signatures for detecting port scans. im unsure the asa syslogs anything of the sort as i've never seen one before, someone else may have a better answer for that
On Wed, Jun 25, 2008 at 4:29 PM, Jarrod Friedland < [EMAIL PROTECTED]> wrote: > Morning All > > Quick Question, within the standard ASA 5520 box, what is the best way to > fire off a notification that the box is being port scanned by a specific > ip. > Would you require third party application for this or is ASDM / the ASA > itself capable of such notifications. Are we able to make use of CiscoWorks > for this type of notification from the ASA devices. > > Any info would be greatly appreciated. > > Thanks > > -- > > -- > Jarrod > _______________________________________________ > cisco-nsp mailing list cisco-nsp@puck.nether.net > https://puck.nether.net/mailman/listinfo/cisco-nsp > archive at http://puck.nether.net/pipermail/cisco-nsp/ > _______________________________________________ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/