Re: IDS responses

From: <marca369(at)student.liu.se>
Date: Mon Nov 18 2002 - 09:33:35 EST

('binary' encoding is not supported, stored as-is)
In-Reply-To: <009501c28e69$a5b09a80$438990d5@ch.ema.ad.pwcinternal.com>

>> Can anyone explain or direct me to an explanation of the SNMP Trap's
its
>end might then reconfigure the network device (probably via SNMP again,
but
>not TRAPS, but an SNMP SET). I think this is all the magic that is behind

So, as far as I understand, what vendors mean by stating their products support "SNMP Trap" is the same as supporting blocking or shunning (reconfiguring router/firewall ACLs)? Using SNMP for sending event messages to the IDS console wouldnt be very smart since its a connectionless protocol (UDP) and the traffic is unencrypted.

/Markus Received on Wed Nov 20 01:24:16 2002