Hi Joel,
The IDS is installed between router and firewall.The connection's
from IDS,Router and firewall are terminated on Hub.My question is how is TCP
session gets killed,when IDS is in stealth mode and traffic coming on IDS's
port on hub is also sent to port on which firewall is connected at same
time.Does Proventia send RST to all ports on Hub.Please clarify.
Thanking you all in Anticipation.
Regards
Priyank Gaddala
-----Original Message-----
From: Joel Esler [mailto:esler@knology.net]
Sent: Thursday, November 04, 2004 4:37 AM
To: priyank@tatatechnologies.com
Subject: Re: [ISSForum] Query Regarding RSKILL Option
RSKill attempts to send RST packets to each end of the connection
effectively killing the connection.
Joel
On Nov 3, 2004, at 06:29, priyank@tatatechnologies.com wrote:
Dear All,
I have recently installed A201 Provetia in our
organization
and have defined some basic policies.When defining policy there is an
option
"RSKILL", does this option
kill TCP connection.There is continous logging of
SQL_SLAMMER_WORM,because
of this my log file is getting full,can i set it to "RSKILL"
option.Any
help would be appreciated
Thanking You All In Anticipation.
Regards
Priyank Gaddala
Technical Consultant - Sytems Integration and Support
Tata Technologies Ltd
***********************************************************************
*****************************
Email Disclaimer:
Information contained and transmitted by this e-mail is
confidential,proprietary, and legally privileged data of Tata
Technologies that is intended for use only by the addressee.If you are
not the intended recipient, you are notified that any dissemination,
distribution, or copying of this e-mail is strictly prohibited.You are
requested to delete this e-mail immediately and notify the
originator.Any views expressed by an individual do not necessarily
reflect the view of Tata Technologies.While this e-mail has been
checked for all known viruses, the addressee should also scan for
viruses.Internet communications cannot be guaranteed to be timely,
secure, error or virus-free as information could be intercepted,
corrupted, lost, destroyed, arrive late or incomplete.Tata
Technologies does not accept liability for any errors or omissions.To
know more about Tata Technologiesplease visit
http://www.tatatechnologies.com
***********************************************************************
****************************
_______________________________________________
ISSForum mailing list
ISSForum@iss.net
TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to
https://atla-mm1.iss.net/mailman/listinfo/issforum
To contact the ISSForum Moderator, send email to mod-issforum@iss.net
The ISSForum mailing list is hosted and managed by Internet Security
Systems, 6303 Barfield Road, Atlanta, Georgia, USA 30328.
****************************************************************************************************
Email Disclaimer:
Information contained and transmitted by this e-mail is
confidential,proprietary, and legally privileged data of Tata Technologies that
is intended for use only by the addressee.If you are not the intended
recipient, you are notified that any dissemination, distribution, or copying of
this e-mail is strictly prohibited.You are requested to delete this e-mail
immediately and notify the originator.Any views expressed by an individual do
not necessarily reflect the view of Tata Technologies.While this e-mail has
been checked for all known viruses, the addressee should also scan for
viruses.Internet communications cannot be guaranteed to be timely, secure,
error or virus-free as information could be intercepted, corrupted, lost,
destroyed, arrive late or incomplete.Tata Technologies does not accept
liability for any errors or omissions.To know more about Tata
Technologiesplease visit http://www.tatatechnologies.com
***************************************************************************************************
_______________________________________________
ISSForum mailing list
ISSForum@iss.net
TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to
https://atla-mm1.iss.net/mailman/listinfo/issforum
To contact the ISSForum Moderator, send email to mod-issforum@iss.net
The ISSForum mailing list is hosted and managed by Internet Security Systems,
6303 Barfield Road, Atlanta, Georgia, USA 30328.
