Welcome to ISAserver.org

Intrusion Detection Alerts

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2000 Firewall] >> General >> Intrusion Detection Alerts

Page: [1]

Message

<< Older Topic Newer Topic >>

Intrusion Detection Alerts - 22.Jan.2001 8:55:00 PM

michael_archer

Posts: 4
Joined: 22.Jan.2001
From: Cherry Hill, NJ USA
Status: offline

Currently testing a system configured with ISA server-Standard as a Firewall and Web cache. Using Win2K SP1 w/hotfix.

I'm unable to generate an alert for Intrusion Detection after using Foundstone Security Superscan v3.0 to scan ports 1-3000.
I am scanning from an internal W2K server.

Will be bringing up a Linux box for more evaluations but I've (obviously) missed something in my configuration. Read thru the Help files and have verified my configuration is as recommended.

Has anyone gotten Intrusion Detection Alerts to work? All help is appreciated. Thanks!

------------------
Michael Archer
Kennedy Health Systems

Post #: 1

Featured Links*

RE: Intrusion Detection Alerts - 23.Jan.2001 3:07:00 PM

tshinder

Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Michael,

I've been able to get intrusion detection to send me an alert for IP Half Scans. But when I've performed similar port scanning attempts like what you have done, I failed to get any alert sent. I have not seen anybody explain why this port scans don't generate an alert, but I'll post something when I find out.

Tom

quote:
Originally posted by michael_archer:
Currently testing a system configured with ISA server-Standard as a Firewall and Web cache. Using Win2K SP1 w/hotfix.
I'm unable to generate an alert for Intrusion Detection after using Foundstone Security Superscan v3.0 to scan ports 1-3000.
I am scanning from an internal W2K server.
Will be bringing up a Linux box for more evaluations but I've (obviously) missed something in my configuration. Read thru the Help files and have verified my configuration is as recommended.
Has anyone gotten Intrusion Detection Alerts to work? All help is appreciated. Thanks!

(in reply to michael_archer)

Post #: 2