+ Reply to Thread
Results 1 to 5 of 5
  1. Member
    Join Date
    Oct 2012
    Location
    Portugal
    Posts
    46

    Certifications
    CCNA, CCNP
    #1

    Default How to practice IDS/IPS?

    Hello,

    I have an home lab with 3 1841's, 2 2950's and one ASA 5510.

    I want to know how can I practice IDS/IPS subject without having the signature files...
    Is there any way to do so? Aren't there any sample files free for download for this purpose? Any ideas?

    Thanks!
    Reply With Quote Quote  

  2. SS -->
  3. Senior Member 636-555-3226's Avatar
    Join Date
    Jul 2015
    Posts
    881

    Certifications
    Lots of security certifications, yet the more I learn, the further I have to go...
    #2
    Sorry, I'm not up on my Cisco hardware, but a question I'll ask is does the ASA have IDS/IPS capabilities?
    Reply With Quote Quote  

  4. Member
    Join Date
    Oct 2012
    Location
    Portugal
    Posts
    46

    Certifications
    CCNA, CCNP
    #3
    Hey,

    I was thinking about IOS/IPS, as ISR routers (such as 1841) include native IPS capabilities.
    Anyway, from what I've been seeing in video courses, .pkg signature files are needed... I just want to know if there is any way to test/practice this without these signature files (or if a sample file can be downloaded for free for example).
    Reply With Quote Quote  

  5. Senior Member 636-555-3226's Avatar
    Join Date
    Jul 2015
    Posts
    881

    Certifications
    Lots of security certifications, yet the more I learn, the further I have to go...
    #4
    Sorry I can't help you. Maybe someone else here... My guess would be that you need to subscribe to Cisco's service to get any signature files. Otherwise it's easy to test it's IPS capabilities once you get signatures - just download Nessus (free) and start scanning your network with it. A properly tuned IDS/IPS should detect/clamp down on that extremely quickly
    Reply With Quote Quote  

  6. Member
    Join Date
    Oct 2012
    Location
    Portugal
    Posts
    46

    Certifications
    CCNA, CCNP
    #5
    I don't know about Cisco's policy about sharing signature files.. Is this allowed? Can anyone share a sample file just for testing purposes?
    Appreciate if someone can help.

    Thanks!
    Reply With Quote Quote  

+ Reply to Thread

Social Networking & Bookmarks