The Information in just for your information because those signature contain some normal data traffic, so you want to configure the information alarm as follow
ip audit name outside-info info action alarm Greg Owens Jr -----Original Message----- From: Kenny Smith [mailto:[EMAIL PROTECTED]] Sent: Wednesday, December 11, 2002 9:18 PM To: [EMAIL PROTECTED]; [EMAIL PROTECTED] Subject: Re: why lose connection after apply IDS on PIX [7:58960] Hi.. Greg. Thanks 4 your guide. By the way, Are you saying that we can drop the attack alarm not the informational alarm? >From: "Greg Owens" >Reply-To: "Greg Owens" >To: [EMAIL PROTECTED] >Subject: Re: why lose connection after apply IDS on PIX [7:58960] >Date: Wed, 11 Dec 2002 13:56:41 GMT > >I have implemented the same IDS on the PIX, however, I did not "and would >not" drop informational alarms. That why you are lose connectivity. Just >use the alarm option. > > > > > From: "Kenny Smith" > > Date: 2002/12/10 Tue PM 10:18:16 EST > > To: [EMAIL PROTECTED] > > Subject: why lose connection after apply IDS on PIX [7:58960] > > > > HI... Dear Friends, > > > > I want to implement IDS on my PIX outside interface which facing >internet. > > So that I can get alarm for external attack. Below is my interface >config > > and global ip audit name config > > > > nameif ethernet0 outside security0 > > nameif ethernet1 inside security100 > > > > ip audit name outside-info info action alarm drop > > ip audit name outside-attack attack action alarm drop > > > > But I apply it on my outside interface as shown below..I immediately >lose > > connection with outside. Can't ping and connect to external network? >Why? > > > > PIX(config)#ip audit interface outside outside-info > > PIX(config)#ip audit interface outside outside-attack > > > > Thanks a lot > > > > > > > > > > > > _________________________________________________________________ > > Tired of spam? Get advanced junk mail protection with MSN 8. > > http://join.msn.com/?page=features/junkmail >Greg Owens >202-398-2552 _________________________________________________________________ Protect your PC - get McAfee.com VirusScan Online http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=3963 Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=59031&t=58960 -------------------------------------------------- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]