• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 476
  • Last Modified:

ips-4260 not triggering events for port sweeps from certain vlan's

We have a test environment for our IPS.  the connections are router - IPS - switch.  If I do a port sweep from our production VLAN into our test environment (diff VLAN), no event is generated.  It appears there is only one vlan that this works from.  However, if I run a ping sweep from inside our test environment to any vlan in our production network, those come through.

When I run the ping sweep, I do see the number of packets increasing on those interfaces.  

On the IPS, we have an inline pair configured, and no VLAN groups or pairs.  We are using the default virtual sensor, and no rules have been changed other than adding the inline pair to the vs0.
1 Solution
cnjbucksAuthor Commented:
I opened a TAC case with Cisco for this.  It turns out that only certain ping sweep applications with trigger an event on the IPS.
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Protect Your Employees from Wi-Fi Threats

As Wi-Fi growth and popularity continues to climb, not everyone understands the risks that come with connecting to public Wi-Fi or even offering Wi-Fi to employees, visitors and guests. Download the resource kit to make sure your safe wherever business takes you!

Tackle projects and never again get stuck behind a technical roadblock.
Join Now