I am trying to wrap my head around what this feature actually does. Under Anomaly Detections for both TCP and UDP we can configure specific port numbers, and then further set thresholds and parameters for them. The documentation is pretty vague. Can anybody give me an example of this? I guess I understand that you could define a specific TCP or UDP destination port with more specific thresholds than the general scan thresholds (override) but I don't really get it.
For example, let's say I add TCP port 9999, enable it, but do NOT set scanner override. What would that accomplish? Thanks! -- Regards, Joe Astorino CCIE #24347 http://astorinonetworks.com "He not busy being born is busy dying" - Dylan _______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com Are you a CCNP or CCIE and looking for a job? Check out www.PlatinumPlacement.com
