Hi Bruno, When the IDS detects an unauthorized activity, the posibly action for the sensor are: 1. TCP Reset, 2. IP Log 3. IP Block
The sensor cannot shutdown an interface and do not do a trace route to the attackers. CMIAW Best Regards, HATO >From: "Bruno Fernandes" >Reply-To: "Bruno Fernandes" >To: [EMAIL PROTECTED] >Subject: IDS Sensor action [7:54762] >Date: Wed, 2 Oct 2002 23:23:20 GMT > >Hi !!! > >If a sensor detects unauthorized activity, are the following possible >action ? > >(action1) --> Shutdown Interface >(action2) --> Perform a traceroute to the source of the attack > > > >I am taking the Vconsole tests and some of their answers follow this >actions, but this doesn't make much sense to me, to what i have read >about it. > >Thanks in advance >BF _________________________________________________________________ Chat with friends online, try MSN Messenger: http://messenger.msn.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=55076&t=54762 -------------------------------------------------- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
