I have only a single ID and would like to know if its possible to monitor all the VLANS.

With only one ID I I want to know if it is possible to monitor all my VLAN in the network. I use version 4 ID and VMS MC 1.1.

If I have to set my internal addresses and those which I define as internal are considered as approved, in the case that I have configure a port in my central switch to monitor all the VLANS in my network and connect the ID to the destination monitor port to sniff all the VLAN, VLAN which I consider as an intern?

Also, I have switches catalyst 6006 and 6509 with version 5.1 (3) and 12.1 in each case, can I apply for fleeing to take acctions when an attack is detected?

Is it possible this configuration?

Thanks for any help-

I don't know if the ID is used to detect the specific activity you mentioned. You would need to go through our list of signatures to see if it's possible. You can even submit a new assignment and ask this question again.

As for the actions.

Cat OS 5.3 should allow you to be able to inject a TCP Reset packets through a span port (requires the parameter enable inpackets).

In regards to the blocking with Cat OS 5.3, I don't think that this version supports the VACL. You may need to upgrade the version of the OS to chat if you want to block with VACL, and you also need a PFC and an MSFC on the supervisor.

NOTE: If you have an MSFC making routing you may also block with the traditional router ACL on the MSFC.

On the IOS running native 6509 (where IOS instead of the traditional CatOS runs on the prime contractor), there may be a problem with TCP resets. I don't know if the port of the monitor (equivalent IOS native span port) will allow the incoming TCP resets. You need to browse the documentation.

Some versions of native IOS (I think that what you have newer versions) will also allow you to monitor through the capture of Vlan ACLS feature. If the sensor is followed by a VACL Capture port instead of a port monitor then I think that the TCP reset works OK, but I have not tested.

With native IOS the sensor supports router blocking with the traditional ACL, it does not support blocking with Vlan ACL in native IOS.

NOTE: The difference between router ACL and Vlan ACL is the Vlan ACL is applied to the vlan and applies to all packages comining and at the exit of the Vlan. While the router ACL is actually applied to the INTERFACE of the Vlan where an IP address has been assigned and only applies to packets routed in or off the Vlan.

NOTE: Native IOS requires that the master has an MSFC even load the image.

Tags: Cisco Security

Similar Questions

  • I have a toshiba satellite L300 and would like to know how to reset it to factory settings?

    I have a toshiba equium l300 and there many problems tht, I did it by downloading a lot stuuf him. I would really like to know how to reset my laptop to its original settings. Help, please.

    Thank you Emma.

    Hello

    Please the manual on using the Recovery Wizard included in this link for Toshiba systems:http://cdgenp01.csd.toshiba.com/content/support/downloads/PMA500339010_web.pdf

    Good luck, Rick Rogers, aka "Crazy" - Microsoft MVP http://mvp.support.microsoft.com Windows help - www.rickrogers.org

  • Apple watch ever the size of the file download updates? I have little download caps and would like to know the size of the file before downloading. Also to take advantage of free download period... is 02:00 until 08:00 a way to schedule download

    Apple never shows the size of the file download updates? I have little download caps and would like to know the size of the file before downloading. Also to take advantage of free download period... 02:00 until 08:00 is there a way to plan downloads?

    Yes. Informed of an update, select "install tonight". The downloads will be scheduled to occur at 02:00 local time.

    Make sure that your MBA is connected to the power of this night there.

  • Upgrade to Windows 7 and would like to know if all my tablet/pen functions still work?

    Original title: Windows7 and Tablet PC

    I have a Gateway Tablet PC.  He who is like a laptop, not these new without a keyboard.  For some reason, she has two model numbers: TA1.0 and M280E.  At the moment it has Windows XP (gateway) Tablet PC edition 2005 Version 2002 Service Pack 3 on it.  It has a processor Intel Pentium M 1.73GHz, 1,999 GB of RAM or processor if you look in the BIOS, 2048 MB of RAM.  I think it's the RAM Max will take this particular PC.  The processor is scalable?  I know that I have contributed to a maximum of one of my doors from the other monitor has collapsed on me one day and is unusable, so I think this is one.  The ugly manual, I downloaded did not about the Max RAM, a Fujitsu 37.2 GB HD and a CD - RW Optiarc.

    Because Windows XP is longer supported, no. updates (although I find it odd that a pop-up saying updates are ready for your computer is fun) and for some reason it will run is more than some previous programs I ran over it, such as MSE and Windows Media Player 11, and I don't know I'll find others.

    The important question is: I want to upgrade to Windows 7 and would like to know if all my tablet/pen functions still work, since it's the main reason I want to use?  And of course running WinXP is a safety hazard as well.

    I use my ASUS X54C now and you want to reset to factory settings and reformat the HD, so I want a computer to use while I'm this, as well as using his pen to create a clip art image and also many other things.  Is there anything else I should know?

    The first thing to do is to check the support web site of the gateway to see if there are drivers for devices on Windows 7 for your model. If there is no record of specific device in Windows 7 listed then you will not be able to run Windows 7 correctly, or it may not work at all.

    Gateway driver support web site: http://us.gateway.com/gw/en/US/content/drivers-downloads

    Note: There is an "Auto Detect" option that can help you determine the right model you have.

    M280 using as a guide I tried to see what is available and found only XP / Vista and Windows 2000 drivers, so you may be out of luck, but try to auto detect and see if you have Windows 7 drivers listed.

    J W Stuart: http://www.pagestart.com

  • I have an apple phone 5 and I wanted to know if it was safe to download the beta version of IOS 10?

    I have an apple phone 5 and I wanted to know if it was safe to download the beta version of IOS 10?

    Beta software may not be discussed in the public forum. If you are interested in beta iOS, you must take a look at this FAQ page. Beta of iOS should not be loaded on a device for daily use, it's really for testing only. https://beta.Apple.com/SP/betaprogram/FAQ

  • I would like to know how I can make firefox stop the message that I have to restart my browser to complete the update without having to reboot?

    I would like to know how I can make firefox stop the message that I have to restart my browser to complete the update? I'll restart later, but does not wish to do so immediately. I can
    Click on the cross, but after a few minutes the message is back and I can't figure out how to stop
    It's popping every few minutes.

    You need to restart it.

  • Hi, I'm developing a simple mobile app in DW CC 2015 using JQuery Mobile. LIKE I need the list view with description of the product, functionality and image, I would like to connect with database instead of "writing" all the tables in the bearings inside

    Hi, I'm developing a simple mobile app in DW CC 2015 using JQuery Mobile. LIKE I need the list view with description of the product, functionality and image, I would like to connect with database instead of "writing" all the tables in the bearings inside the Jquery page. In the future I would also be able to add, to remove the DB records. Any help, tutorial... Thanks TG

    I would like to connect with the database instead of "writing" all the tables in the bearings inside the Jquery page

    This is usually done with a CMS (content management system). There are commercial products CMS like WordPress, Joomla and perch. You create one or several layouts and then create pages of these page layouts using the CMS. In this way, it is possible to have hundreds of pages, each with unique content, but a page layout that can be managed in a place of sharing.

    CMSs on shelf don't require programming skills. Otherwise, some of us write our own CMS with custom functions, but this requires back-end, as with PHP programming.

  • I run on a Mac CS6.  I need to change the operating system and would like to know if I can still install the software

    I run on a Mac CS6.  I need to change the operating system and would like to know if I can still install the software.  I upgraded to OS X 7 (Lion) for OS X 10 (Coyote), but my devices would not work.  I'm changing to OS X 7 (Lion), but this will eliminate my entire hard drive.  My CS6 software install?  I bought CS5 and CS6 improved.  I don't want to go on the CCif I don't have to.  Thank you!!!

    as long as you have your serial numbers and installation cs6 files, you should be ok.

    Available downloadable Setup files:

    Download and installation help links Adobe

    Help download and installation to Prodesigntools links can be found on the most linked pages.  They are essential; especially steps 1, 2 and 3.  If you click on a link that does not have these listed steps, open a second window by using the link to Lightroom 3 to see these "important Instructions".

    window using the Lightroom 3 link to see these "important Instructions".

  • I want to keep my Adobe Creative Suite 5.5 and would like to know if there are problems with update to Windows 10?

    I want to keep my Creative Suite 5.5 and would like to know if there are problems installing Windows 10?

    May work, may not... but will NOT be updated by Adobe to work on Win10

    An idea that MAY work to install or run some programs in Windows 10 old... works for some, not for others

    -http://www.tenforums.com/tutorials/15523-compatibility-mode-settings-apps-change-windows-1 0 - a.html

    - or to run it as Administrator http://forums.adobe.com/thread/969395 to assign permissions FULL said... yet, but it is sometimes necessary for Adobe programs

  • I am a registered owner of Lightroom 6 but my old computer (PC) is dead and is seemingly irreparable... I just bought a MacPro and would like to know if it is possible to download the Mac version 6 on it without having to pay for another license.

    I am a registered owner of Lightroom 6 but my old computer (PC) is dead and is seemingly irreparable... I just bought a MacPro and would like to know if it is possible to download the Mac version 6 on it without having to pay for another license.

    Hi Charlay,

    Yes, you can download Lightroom on your Mac computer from this link: Install Photoshop Lightroom

    And you can then activate Adobe programs on two machines, you will be able to activate it without having to buy it again.

    Kind regards

    Claes

  • Hi, just bought new laptop to replace the old broken one and would like to know how to install my Photoshop & Lightroom on the new laptop please?

    Hi, just bought new laptop to replace the old broken one and would like to know how to install my Photoshop & Lightroom on the new laptop please?

    Please use the link below to download your products and keep your serial number at hand with you as well to enable:

    Photoshop CS6 extended:

    Download Creative Suite 6 applications

    Lightroom 5:

    Download Photoshop Lightroom

    Please let us know if it helps.

    ~ Sarika

  • I have a new macbook pro and want to install CS3 on it. I followed all the download links. Found my serial number for my Adobe account and get up to date through the whole & get this message ' put in place has encountered an error and cannot continue,

    I have a new macbook pro and want to install CS3 on it. I followed all the download links. Found my serial number for my Adobe account and get up to date through the whole & get this message ' put in place has encountered an error and cannot continue, contact adobe customer support for assistance ' all I want is for CS3 to install on my new computer so I can continue to work and do not have to spend hours working it help Please. CC is not an option, because I work in a country with no reliable unlimited internet access

    New computer means new problems of system operating with the OLD software means

    Fix possible Mac 10.10.4 (at least for Premiere Pro) https://forums.adobe.com/thread/1891705

    10.10 mac. ? sometimes has problems, often related to the 'default' permissions that need to be changed

    -solution https://forums.adobe.com/thread/1689788 of a person

  • Hello, I am a student and I bought already cs6 (dvd) and would like to ask - is it possible to get an upgrade for cs6 premium and how much it costs and how are they managing?

    Hello

    I am a student and I bought already cs6 (dvd) and would like to ask - is it possible to get an upgrade for cs6 premium

    and how much it costs and how are they managing?

    http://www.Adobe.com/au/products/creativesuite/UpgradeInfo.html

  • Hello, I would like to know if is possible I recover my emails that I received or emails that I deleted

    I would like to know if is possible I recover my emails from you guys (if you have on your archive) all emails that I received from 15/03/2011 to 05/07/2011
    I thought that if you guys could come back to send me my mail.

    TKS and greetings!

    Hi thiagomatano,

    Sorry, but this cannot be done.  They are generated when an event occurs that causes an alert email based in part on how you setup your computer to get their.  They have not worked perfectly the last few months so that should be sent are not sent (or need a special solution to be able to get them).  Just out of curiosity, why do you need these alerts because the information is contained in the discussions of the forum and you can see the threads where you would get alerts in your profile (more to follow).

    To try to do what you are looking for, go to your profile by clicking on your name at the top of this page or next to your message.  Once there, which tab you choose depends on what you are looking for.  If it is a question or a thread where you clicked the button "Me Too", you can click on the tab for my Questions and see all the threads where you started the thread, or click this button to subscribe to the discussion.  Then you will have to, unfortunately, looking for thread by thread for positions that would have generated email alerts (essentially each answer after you have started the thread or after you have clicked on the button "Me Too").  Those who should have lead to alerts by e-mail and you can see if you can find what you're looking like that.  This is probably the best way to find these messages because it will probably the shorter list.  You also received messages to threads subscribed if a response on your part has been marked as an answer.  This could happen in one of your sons or another (if you use the button 'Me Too' for you to subscribe to the other thread).  There is no separate post of that - just a notation on your post that it was the answer.

    If it involves a response you made to a post in another thread and you have not clicked on the button "Me Too", so even if your profile may specify that you get alerts by e-mail, would not have obtained you their because this feature did not work during this period.  If you were using the "Me Too" to receive alerts, so they will be in the my Questions tab as well as in the discussions tab all (including each thread where you answered, your, Subscriber or not).  As I said, I do not think that you would have received alerts in e-mail any thread here which is not included in the Questions My tab - so I start there and ignore the other.

    Unless you have received a personal e-mail and private forum moderators or the owners, it's good enough emails only that you would have got the forums.  Emails do not contain anything that is not in the forums now for your son (even if they sometimes contain original answers and what currently exists may have been edited and edited responses are not returned and you don't see them in the net - but the final version is what you want anyway).

    I'm sorry, but return all of these e-mails is not something offered or available through these forums.  They can be stored (I don't know and I don't know for how long), but even if that's true, it's probably not in a way that the forum can reasonably accommodate such a request.  And the forum can not re - treat all these threads to regenerate new emails either (well, it might be possible, but it is not available or offered).

    I hope you find what you want or need following the process above and checking your history of thread.

    Sorry, we can't help you with this request, but it is not just something the forums offer or that there is (if it is even possible at all).

    Good luck and best wishes!

    P.S. According to your e-mail program and your operating system and how make you backups as well as if you save e-mail messages on the server but also to download (or pass them on to another location or program for any reason any (some people do this to gain access to information both at home and at work)) It may be possible to recover.

    If it involves a special program (such as Outlook or Windows Live Mail) or some e-mail (such as Hotmail or Yahoo) providers, they can refer you elsewhere for assistance.  They can also do it depending on how the emails were lost, as a more appropriate forum can be then the system repair and recovery (where recovery programs of standard files like Recuva can help a little) or perhaps separate Microsoft backup forum if you have backups, we can use to retrieve the emails (or at least some of them).

    It is also possible that a specialist in data recovery can recover your system (although it is generally very, very expensive and there is no guarantee - you pay the even if they recover all or any of them).

    But the starting point review these recovery options is the forum above - changed for your operating system - link and post the question there (not if the forum can send emails - what is going to happen, but if they can help recover you lost - e-mails which accomplishes the same thing in the end, but in a different way) and then follow their advice.

  • I would like to know if my signature gives me just the right to install the product into a computer, because I need to have it on my laptop too. Thank you

    I have an annual signature with Adobe, which gives me the right to use the creative cloud (Photoshop and Lightroom). I installed it on my pc. I would like to know if I can also install it on my laptop, because I travel and I need to make my photos facing thank you.

    Cloud license allows 2 activations http://www.adobe.com/legal/licenses-terms.html

    -Install on a 2nd computer http://forums.adobe.com/thread/1452292?tstart=0

    -Windows or Mac has no importance... 2 on the same operating system or 1 on each

    -Two activations on one account CAN NOT be used at the same time (to be noted in the link above of the license)

Maybe you are looking for