Has anybody Filtered for Virius on 8600?

[ZachBenj]

Has anybody setup any filters on the 8600 to stop some of these new virus goig around? If you have will you please share what you filtered on.



My suggestions are what I would try myself. If incorrect, I welcome corrections to my knowledge.
Scott
stomlin@baptistfirst.org

 

[rjenk]

We setup a filter to stop traffic using destination port tcp and udp 135 during a infection. Here is the filter config:

ip traffic-filter create global src-ip 0.0.0.0/0.0.0.0 dst-ip 0.0.0.0/0.0.0.0 id 1
ip traffic-filter filter 1 action mode drop
ip traffic-filter filter 1 action statistic enable
ip traffic-filter filter 1 match dst-port 135 dst-option equal
ip traffic-filter filter 1 match protocol tcp
ip traffic-filter create global src-ip 0.0.0.0/0.0.0.0 dst-ip 0.0.0.0/0.0.0.0 id 2
ip traffic-filter filter 2 action mode drop
ip traffic-filter filter 2 action statistic enable
ip traffic-filter filter 2 match dst-port 135 dst-option equal
ip traffic-filter filter 2 match protocol udp