[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] Re: [FW-1] tool that alerts port scanning and DOS
Real-time analysis for some attacks is a built-in function in Checkpoint NG. You may configure it on the Smartdefense panel (then successive events for port-scanning for exemple). For DOS attack in NG FP3 you can configure it for Teardrop, Ping of Death and Land attack. If you are looking for an external product, take a look on LEA-Opsec compatible products. BR, Stephane. -----Message d'origine----- De : Raymond N [mailto:[email protected]] Envoyé : jeudi 25 septembre 2003 19:34 À : [email protected] Objet : [FW-1] tool that alerts port scanning and DOS Hi there, Just wondering if there are OPSEC tool that would generate alerts about port scanning, DOS attack, or other abnormal form of network traffic patterns? I am not interested about deploying dozen of IDS/IPS agents on the network. What 's in my mind is a real-time log analysis tool that will generate alerts by actively (real-time) scanning the Checkpoint firewall log. Does this sound reasonable? Any suggestions? Thanks. -raymond ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] ================================================= ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] =================================================
|