Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

Register Log in
  • Congratulations TouchToneTommy on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Alert send procedure.

Status
Not open for further replies.
rrgg

rrgg

Technical User
Jun 20, 2003
35
IT
Hi all,
My network is protect by Cisco PIX 506.
When my firewall is under port scan or similar attak I need to send alert to the network administrator.
Also I need to store this attak log.
Ho to improve this???

Tks for answers.

RRGG
 
Sort by date Sort by votes
Set up a loghost, log all dropped inbound packets (or all, if you're really ambitious), and analyze it there.

Pix also has limited IDS capability. Enable "ip audit" to turn it on.
 
Upvote 0 Downvote
Status
Not open for further replies.

Similar threads

desrose
  • Locked
  • Question
snort rules alert for maximum tcp connection of 10
Replies
1
Views
216
kjv1611
kjv1611
hortonhearsawho
  • Locked
  • Question
asa not sending to syslog
Replies
3
Views
283
stubnski
stubnski
fenderjbass
  • Locked
  • Question
Watchguard Firebox not allwoing access to OWA, and send/recieve mail
Replies
1
Views
188
tpit
tpit
prabakar4all
  • Locked
  • Question
Sending data from DELL OMSA SNMP and Custom SNMP MIB to same UDP port
Replies
0
Views
170
prabakar4all
prabakar4all
cheflo
  • Locked
  • Question
ASA5505:Cannot send traffic through L2L VPN and Web simultaneously.
Replies
3
Views
78
Supergrrover
Supergrrover

Part and Inventory Search

Sponsor

Back
Top