Snort mailing list archives
Re: Snort Triggered Shun on Cisco ASA
From: Frank Knobbe <frank () knobbe us>
Date: Tue, 30 Jun 2009 14:28:27 -0500
On Tue, 2009-06-30 at 04:47 -0400, Steven King wrote:
Has anyone configured Snort to trigger a shun command on a Cisco ASA device in an Inline IPS configuration or with NIDS? If so, could you please point me in the right direction to possibly implement this? How effective is this setup?
You can use Snortsam to have Snort alerts cause a shun on Cisco ASA/PIX, routers, and quite a few other firewalls. Regards, Frank
Attachment:
signature.asc
Description: This is a digitally signed message part
------------------------------------------------------------------------------
_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Snort Triggered Shun on Cisco ASA Steven King (Jun 30)
- Re: Snort Triggered Shun on Cisco ASA Joel Esler (Jun 30)
- Re: Snort Triggered Shun on Cisco ASA Frank Knobbe (Jun 30)
- Re: Snort Triggered Shun on Cisco ASA Joel Esler (Jun 30)
- Re: Snort Triggered Shun on Cisco ASA Steven King (Jun 30)
- Re: Snort Triggered Shun on Cisco ASA Frank Knobbe (Jun 30)
- Re: Snort Triggered Shun on Cisco ASA Joel Esler (Jun 30)
- Re: Snort Triggered Shun on Cisco ASA Frank Knobbe (Jun 30)
- <Possible follow-ups>
- Re: Snort Triggered Shun on Cisco ASA Steven King (Jun 30)
- Re: Snort Triggered Shun on Cisco ASA Frank Knobbe (Jun 30)
- Re: Snort Triggered Shun on Cisco ASA CunningPike (Jun 30)
- Re: Snort Triggered Shun on Cisco ASA Frank Knobbe (Jun 30)