Which Cisco IPS signature engine should be selected to …

You are tasked to create a custom IPS signature using the IDM Custom Signature Wizard to detect a network reconnaissance attack in which one system makes
connections to multiple hosts on multiple TCP ports. Which Cisco IPS signature engine should be selected to configure this custom IPS signature?

You are tasked to create a custom IPS signature using the IDM Custom Signature Wizard to detect a network reconnaissance attack in which one system makes
connections to multiple hosts on multiple TCP ports. Which Cisco IPS signature engine should be selected to configure this custom IPS signature?

A.
Atomic IP

B.
Atomic IP Advanced

C.
String TCP

D.
Sweep

E.
Meta

Explanation:
http://www.cisco.com/en/US/docs/security/ips/7.0/configuration/guide/idm/idm_signature_wizar d.html



Leave a Reply 0

Your email address will not be published. Required fields are marked *