|
|
|
|
Additional ReferencesFor additional information related to Firewall Intrusion Detection System (IDS) Signature Enhancements, refer to the following references: Related Documents
Standards
MIBs
To locate and download MIBs for selected platforms, Cisco IOS releases, and feature sets, use Cisco MIB Locator found at the following URL: http://tools.cisco.com/ITDIT/MIBS/servlet/index If Cisco MIB Locator does not support the MIB information that you need, you can also obtain a list of supported MIBs and download MIBs from the Cisco MIBs page at the following URL: http://www.cisco.com/public/sw-center/netmgmt/cmtk/mibs.shtml To access Cisco MIB Locator, you must have an account on Cisco.com. If you have forgotten or lost your account information, send a blank e-mail to cco-locksmith@cisco.com. An automatic check will verify that your e-mail address is registered with Cisco.com. If the check is successful, account details with a new random password will be e-mailed to you. Qualified users can establish an account on Cisco.com by following the directions found at this URL: RFCs
Technical Assistance
Command ReferenceThis feature uses no new or modified commands. All other commands used with this feature are documented in the Cisco IOS Release 12.2 T command reference publications. GlossaryACL—access control list. ACL is a list kept by routers to control access to or from the router for a number of services (for example, to prevent packets with a certain IP address from leaving a particular interface on the router). CBAC—Context-Based Access Control. CBAC is the protocol that provides internal users with secure access control for each application and for all traffic across network perimeters. CBAC enhances security by scrutinizing both source and destination addresses and by tracking the connection status of each application. Compound—Type of attack signature that occurs across multiple packets on the context of a session (referred to as composite in the Network Security Database [NSDB].) Cisco IOS Firewall IDS—The limited subset of Cisco Secure IDS features provided in Cisco IOS. The Cisco IOS Firewall IDS feature supports intrusion detection technology for low-range to high-end router platforms with firewall support. It is ideal for any network perimeter, and especially for locations in which a router is being deployed and additional security between network segments is required. It also can protect intranet and extranet connections where additional security is mandated, and branch-office sites connecting to the corporate office or Internet. Cisco Secure IDS—Enterprise-scale, real-time intrusion detection system designed to detect, report, and terminate unauthorized activity throughout a network. NSDB—Network Security Database. A NSDB is a database that contains the collection of signatures defined and supported by Cisco Secure IDS. SME—signature micro engine. SME is the code in Cisco Secure IDS that implements the state machine to process a given set of similar signatures. SPA—Security Posture Assessment. Determines the most commonly found vulnerabilities.
|
|
Send mail to
webmaster@pbassogroup.com with
questions or comments about this web site.
|
