You may wish to clarify your meaning of "retaliate". When I think retaliate, I think an equal or greater reaction to the probe or attack in question. You may simply be saying take effective counter-measures, such as performing a shun on a host or network, which is already available in multiple products. One such product is the Cisco secure IDS in conjunction with other Cisco network products. For more information on that, see http://www.cisco.com/warp/public/44/solutions/network/security.shtml.
Hope that helps. Aaron Carr, CCNA, MCSE Technology Integration Systems and Process Support Clinical Research and Development (610)651-7321 (Voice) (610)651-6242 (Fax) (610)721-6366 (Mobile) [EMAIL PROTECTED] (Text Pager) The information contained in this e-mail and any attached files, including replies and forwarded copies, are confidential and intended solely for the addressee(s) and may be legally privileged or prohibited from disclosure and unauthorized use. If you are not the named addressee you may not use, copy or disclose this information to any other person. If you received this message in error please notify the sender immediately and delete all copies of the email and associated files. If you are not the intended recipient, any form of reproduction, dissemination, copying, disclosure, modification, distribution and/or publication or any action taken or omitted to be taken in reliance upon this message or its attachments is prohibited and may be unlawful. Any views or opinions presented are solely those of the sender and do not necessarily represent those of Centocor, Inc., or Johnson & Johnson. -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Tuesday, March 05, 2002 12:23 PM To: [EMAIL PROTECTED]; [EMAIL PROTECTED] Subject: IDS that retaliates. Hi I read a long time ago that some goverment agency in the US was working on a IDS that could retaliate. I wonder if someone has any information on any IDS that does that, or any ideas on how to make an IDS that in return of an event triggers different securitymeasures. Thankfull for all replys. Regards Charles --------------------------------------------------------------------- Charles Skoglund, OM AB (Norrlandsgatan 31) SE-105 78 Stockholm Email: [EMAIL PROTECTED] Phone: +46 (0)8 405 64 90 Mobile: +46 (0)70 597 52 32 Switchboard: +46 (0)8 405 60 00