[ISSForum] Response to the Sasser Virus

["Hernandez, Marco" <Marco.Hernandez@xxxxxxxxxxxxx>]

According to my experience, and IDS can not reset a connection if an
attack is based only in a couple of packets because it happens too fast.
So, I thing that the Proventia A series can not stop the exploit vector
for the LSASS vulnerability of the sasser virus although I had enabled
RSKill but a Server Sensor or Proventia G can do.

Am I OK?

Thank you for your answer

_______________________________________________
ISSForum mailing list
ISSForum@xxxxxxx

TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo/issforum

To contact the ISSForum Moderator, send email to mod-issforum@xxxxxxx

The ISSForum mailing list is hosted and managed by Internet Security Systems, 6303 Barfield Road, Atlanta, Georgia, USA 30328.