1 Reply Latest reply on Apr 8, 2010 1:08 PM by SGROSSEN

    IntruShield - Response Port


      What is the Response port on the IntruShield best used/needed for?



        • 1. Re: IntruShield - Response Port

          Response port don't get a lot of use, but the main reason to use the response port is to interject a reset onto the network for a TCP flow. 


          If you are running the sensor ports in SPAN mode, you can use the response port to inject a TCP reset to the source of the attack.   You'd configure the individual alert to send the reset, and then the "configure ports" GUI to setup the response port.