Re: ICMP
Pierre Chifflier <[email protected]> Tue, 14 Sep 2010 11:45:49 +0200
| Newsgroups | gmane.comp.security.ids.prelude.user |
|---|---|
| Organization | EdenWall Technologies |
| Message-ID | <[email protected]> |
On Mon, Sep 13, 2010 at 02:39:54PM -0500, Schubert, Aaron wrote: > What rules file do I need to edit to disable ICMP echo request and ICMP > echo reply? I cannot find these in the cisco-asa.rules file. Hi Aaron, Each rule is identified by a unique id and a revision. If you want to identify a rule causing unneeded alerts, just go in the alert details and look at the alert vendor and id. This will match a specific file (and rule) in the ruleset directory. BR, Pierre _______________________________________________ Prelude-user site list [email protected] http://lists.prelude-technologies.com/mailman/listinfo/prelude-user