Am Dienstag, 28. November 2006 13:11 schrieb Michael Messner: > Dev Anand schrieb: > > Hi All , > > > > Is it possible to quarantine a system by placing it in different vlan > > by OpenRadius ? > > > > If so can somebody guide me on the steps that can be tried . > > > > The situation is like this : > > System already having an IP address , but found to be infected with a > > virus-worm. > > So it needs to be quarantined automatically .
Perhaps better to use a IDS / IPS reconfiguring the switch automatically it malware is detected. snort (GPL) could do this with scripting, Sourcefire (commercial) has buildin support for this. -- Dr. Michael Schwartzkopff MultiNET Services GmbH Bretonischer Ring 7 85630 Grasbrunn Tel: (+49 89) 456 911 - 0 Fax: (+49 89) 456 911 - 21 mob: (+49 174) 343 28 75 PGP Fingerprint: F919 3919 FF12 ED5A 2801 DEA6 AA77 57A4 EDD8 979B Skype: misch42
pgpYAv7y8BAXA.pgp
Description: PGP signature
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
