ips-4260 not triggering events for port sweeps from certain vlan's

Posted on 2009-04-27
Last Modified: 2013-11-29
We have a test environment for our IPS.  the connections are router - IPS - switch.  If I do a port sweep from our production VLAN into our test environment (diff VLAN), no event is generated.  It appears there is only one vlan that this works from.  However, if I run a ping sweep from inside our test environment to any vlan in our production network, those come through.

When I run the ping sweep, I do see the number of packets increasing on those interfaces.  

On the IPS, we have an inline pair configured, and no VLAN groups or pairs.  We are using the default virtual sensor, and no rules have been changed other than adding the inline pair to the vs0.
Question by:cnjbucks
    1 Comment

    Accepted Solution

    I opened a TAC case with Cisco for this.  It turns out that only certain ping sweep applications with trigger an event on the IPS.

    Featured Post

    Do You Know the 4 Main Threat Actor Types?

    Do you know the main threat actor types? Most attackers fall into one of four categories, each with their own favored tactics, techniques, and procedures.

    Join & Write a Comment

    SHARE your personal details only on a NEED to basis. Take CHARGE and SECURE your IDENTITY. How do I then PROTECT myself and stay in charge of my own Personal details (and) - MY own WAY...
    Even if you have implemented a Mobile Device Management solution company wide, it is a good idea to make sure you are taking into account all of the major risks to your electronic protected health information (ePHI).
    This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor ( If you're looking for how to monitor bandwidth using netflow or packet s…
    In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor ( If you're interested in additional methods for monitoring bandwidt…

    734 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    23 Experts available now in Live!

    Get 1:1 Help Now