Hi Joel,
The IDS is installed between router and firewall.The connection's
from IDS,Router and firewall are terminated on Hub.My question is how is TCP
session gets killed,when IDS is in stealth mode and traffic coming on IDS's
port on hub is also sent to port on which firewall is connected at same
time.Does Proventia send RST to all ports on Hub.Please clarify.
Thanking you all in Anticipation.
Regards
Priyank Gaddala
-----Original Message-----
From: Joel Esler [mailto:[EMAIL PROTECTED]
Sent: Thursday, November 04, 2004 4:37 AM
To: [EMAIL PROTECTED]
Subject: Re: [ISSForum] Query Regarding RSKILL Option
RSKill attempts to send RST packets to each end of the connection
effectively killing the connection.
Joel
On Nov 3, 2004, at 06:29, [EMAIL PROTECTED] wrote:
>
>
> Dear All,
> I have recently installed A201 Provetia in our
> organization
> and have defined some basic policies.When defining policy there is an
> option
> "RSKILL", does this option
> kill TCP connection.There is continous logging of
> SQL_SLAMMER_WORM,because
> of this my log file is getting full,can i set it to "RSKILL"
> option.Any
> help would be appreciated
>
> Thanking You All In Anticipation.
>
> Regards
>
> Priyank Gaddala
> Technical Consultant - Sytems Integration and Support
> Tata Technologies Ltd
>
> ***********************************************************************
> *****************************
> Email Disclaimer:
> Information contained and transmitted by this e-mail is
> confidential,proprietary, and legally privileged data of Tata
> Technologies that is intended for use only by the addressee.If you are
> not the intended recipient, you are notified that any dissemination,
> distribution, or copying of this e-mail is strictly prohibited.You are
> requested to delete this e-mail immediately and notify the
> originator.Any views expressed by an individual do not necessarily
> reflect the view of Tata Technologies.While this e-mail has been
> checked for all known viruses, the addressee should also scan for
> viruses.Internet communications cannot be guaranteed to be timely,
> secure, error or virus-free as information could be intercepted,
> corrupted, lost, destroyed, arrive late or incomplete.Tata
> Technologies does not accept liability for any errors or omissions.To
> know more about Tata Technologiesplease visit
> http://www.tatatechnologies.com
> ***********************************************************************
> ****************************
>
> _______________________________________________
> ISSForum mailing list
> [EMAIL PROTECTED]
>
> TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to
> https://atla-mm1.iss.net/mailman/listinfo/issforum
>
> To contact the ISSForum Moderator, send email to [EMAIL PROTECTED]
>
> The ISSForum mailing list is hosted and managed by Internet Security
> Systems, 6303 Barfield Road, Atlanta, Georgia, USA 30328.
>
****************************************************************************************************
Email Disclaimer:
Information contained and transmitted by this e-mail is confidential,proprietary, and
legally privileged data of Tata Technologies that is intended for use only by the
addressee.If you are not the intended recipient, you are notified that any
dissemination, distribution, or copying of this e-mail is strictly prohibited.You are
requested to delete this e-mail immediately and notify the originator.Any views
expressed by an individual do not necessarily reflect the view of Tata
Technologies.While this e-mail has been checked for all known viruses, the addressee
should also scan for viruses.Internet communications cannot be guaranteed to be
timely, secure, error or virus-free as information could be intercepted, corrupted,
lost, destroyed, arrive late or incomplete.Tata Technologies does not accept liability
for any errors or omissions.To know more about Tata Technologiesplease visit
http://www.tatatechnologies.com
***************************************************************************************************
_______________________________________________
ISSForum mailing list
[EMAIL PROTECTED]
TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to
https://atla-mm1.iss.net/mailman/listinfo/issforum
To contact the ISSForum Moderator, send email to [EMAIL PROTECTED]
The ISSForum mailing list is hosted and managed by Internet Security Systems, 6303
Barfield Road, Atlanta, Georgia, USA 30328.
