Cisco IDS Easy Configuration Guide
|
|
|
- 은비 송
- 5 years ago
- Views:
Transcription
1 Cisco IDS Easy Configuration
2 Cisco IDSM Easy Config I. IDS II. III. IV. IEV V. Trouble Shooting
3 Cisco IDSM Easy Config I. IDS II. III. IV. IEV V. Trouble Shooting
4 I. IPS/IDS I.I IPS/IDS
5 I. IPS/IDS I.I A. Signature Based IDS Signature DB Match!!! String Match: String Match: http get./cmd.exe. Traffic Signature (Misused) Based IDS Capture Packet Attack, Worm, Virus, Signature DB IDS.
6 I. IPS/IDS I.I A. Signature Based IDS Signature IDS Signature Based IDS. False Positive( ) : Packet Event Signature Rule. False Negative( ) Signature Update IDS Attack Packet Capture Packet Loss Signature Based IDS. False Positive. Tuning False Positive Vendor Quality Signature Signature.. Customize.
7 I. IPS/IDS I.I A. Signature Based IDS Signature Based IDS. Attack. Attack.. Signature Update., 3. Signature, IDS. 4. Signature Signature IDS Quality. Market Lead IDS Vendor IDS Signature.
8 I. IPS/IDS I.I B. Policy Based IDS IDS Alarm!!! IP IPX Traffic Policy Based IDS Capture Packet Policy, Packet Alarm,Evnet IDS Tuning
9 I. IPS/IDS I.I B. Policy Based IDS IDS Policy Based IDS. Detection Signature Based Config, False Positive.. Very Focused,. 3. Signature Tuning, Policy Based IDS. Policy Based IDS. Network. Focus Attack, (Ex.DMZ Zone).
10 I. IPS/IDS I.I C. Anomaly Based IDS Anomaly IDS UDP Flooding, Impossible Ip packet. Anomaly Based IDS Statistical vs non-statistical : Traffic
11 I. IPS/IDS I.I C. Anomaly Based IDS Anomaly IDS Anomaly Based IDS. Signature.. Anomaly Based IDS. Focus Attack, (Ex.DMZ Zone).., Reporting.
12 I. IPS/IDS I.II A. Passive IDS IDS Event - Alarm Passive IDS Event Managerment Server,, Log, Report
13 I. IPS/IDS I.II B. Active IDS IDS Event - Alarm Active IDS Event Managerment Server,,., Traffic
14 I. IPS/IDS I.II C. Passive IDS vs Active IDS IDS vs IPS IPS ASIC IDS Engine. Connection Reset TCP FIN flag. UDP,ICMP. 3. IP Blocking.. TCP/UDP/ICPM. H/W 3. IPS Active IDS.
15 I. IPS/IDS I.III Network IDS, Host IDS
16 Cisco IDSM Easy Config I. IDS II. III. IV. IEV V. Trouble Shooting
17 II. IPS/IDS II.I A.
18 II. IPS/IDS II.I B. Interface G bps G bps Reset Interface TCP Rest Command Control port IDSM Interface 70G Switching Fabric 7 8 G bps Sensing Interface Packet Capture Interface
19 II. IPS/IDS II.II. IDSM Vlan. IDSM Setup IP, ACL IDSM Filtering 3. SPAN or VACL : 7600/6500 Backbone Packet Capture 4. IDM or VMS IDS Tuning
20 II. IPS/IDS II.II A. 6500#show module <IDSM Slot > Mod Ports Card Type Model Serial No Intrusion Detection System WS-SVC-IDSM- SAD0700DZ Mod MAC addresses Hw Fw Sw Status fcbe.8a0 to 000.fcbe.8a7.0 7.() 4.(3)S8 Ok Mod Sub-Module Model Serial Hw Status IDS accelerator board WS-SVC-IDSUPG A.0 Ok Mod Online Diag Status Pass 4 3. IDSM Serial. IDSM Signature Version 3. IDSM 4. IDSM Test Print
21 II. IPS/IDS II.II B. IDSM IP Network 70G Switching Fabric 7 8 G bps G bps Reset Interface TCP Rest Command Control port IDSM Interface G bps Sensing Interface Packet Capture Interface Native IOS IDSM IP Vlan intrusion-detection module 5 management-port access-vlan IDSM IP Vlan Hybrid OS IDSM IP Vlan set vlan 5/ IDSM IP Vlan
22 II. IPS/IDS II.II C. IDSM 7600/6500 IDSM. Native IOS IDSM 6500#session slot <IDSM slot > processor ( ) session slot 5 pr. Hybrid IOS IDSM 6500#session <IDSM slot > ( ) session 5 3. Native/Hybrid 6500#telnet <IDSM slot +> ( ) telnet Native IOS Tip Alias( ) #conf t 6500(config)#alias exec idsm session slot <IDSM slot > processor 6500#idsm 6500 IDSM
23 II. IPS/IDS II.II C. IDSM < > 653##session slot pr The default escape character is Ctrl-^, then x. You can also type 'exit' at the remote prompt to end the session Trying Open login: cisco Password: ***NOTICE*** IDSM ID & Password This product contains cryptographic features and is subject to United States and local country laws governing import, export, transfer and use. Delivery of Cisco cryptographic products does not imply third-party authority to import, export, distribute or use encryption. Importers, exporters, distributors and users are responsible for compliance with U.S. and local country laws. By using this product you agree to comply with applicable laws and regulations. If you are unable to comply with U.S. and local laws, return this product immediately. A summary of U.S. laws governing Cisco cryptographic products may be found at: If you require further assistance please contact us by sending to export@cisco.com. sensor# 3, Hostname Prompt
24 II. IPS/IDS II.II D. CLI(Command Line Interface) Setup Sensor#setup At any point you may enter a question mark '?' for help. User ctrl-c to abort configuration dialog at any prompt. Default settings are in square brackets '[]'. IDSM Setup IDSM Display Current Configuration: networkparams ipaddress defaultgateway hostname sensor accesslist ipaddress netmask exit timeparams summertimeparams active-selection none exit exit service webserver general ports 443 exit exit Current time: Wed Jan 7 9:07: Setup Configuration last modified: Wed Jan 7 9:06:08 004
25 II. IPS/IDS II.II D. CLI(Command Line Interface) Setup Continue with configuration dialog?[yes]: Enter host name[sensor]: IDSM Sensor Host name Enter IP address[ ]: Sensor IP Address Enter netmask[ ]: Sensor Netmask Enter default gateway[ ]: Sensor Gateway Enter telnet-server status[disabled]: Enable disable Telnet Service Enter web-server port[443]: SSL Port Modify current access list?[no]: Modify current access list?[no]: yes Current access list entries: [] Delete: Delete: Permit: Permit: IDSM IP ACL IP IDSM
26 II. IPS/IDS II.II D. CLI(Command Line Interface) Setup Modify system clock settings?[no]: The following configuration was entered. networkparams ipaddress netmask defaultgateway hostname IDSM accesslist ipaddress netmask exit timeparams summertimeparams active-selection none exit exit service webserver general ports 443 exit Exit Setup Config Display [0] Go to the command prompt without saving this config. [] Return back to the setup without saving this config. [] Save this configuration and exit setup. Enter your selection[]: Setup
27 II. IPS/IDS II.II E. IDSM Packet Capture -SPAN Line Card Line Card Line Card 70G Switching Fabric 7 8 Vlan Vlan Vlan 999 G bps Sensing Interface Packet Capture Interface Native IOS SPAN Packet Capture monitor session source vlan,, 999 rx ## Vlan,,999 Packet Capture monitor session destination intrusion-detection-module 5 data-port ## Capture Packet Module 5 IDSM Sensing Interface. ## Data-port IDSM Interface 7, Data-port Interface 8. Hybrid OS SPAN Packet Capture set span,, 999 5/7 rx ## IDSM Interface 7 Traffic Capture, Destination Interface Interface.
28 II. IPS/IDS II.II F. IDSM Packet Capture Vlan ACL Capture VACL Capture IDSM Packet Capture SPAN(Port Mirroring) 4,, IDS SPAN Line Card 4. VACL Capture Packet Data port 5. Vlan Capture Line Card 70G Switching Fabric 7 8 Line Card Vlan Vlan Vlan 999 G bps Sensing Interface Packet Capture Interface. Access-list All IP Permit. Vlan ACL Map Capture 3. VLAN
29 II. IPS/IDS II.II F. IDSM Packet Capture Vlan ACL Capture. Access-list access-list 99 permit ip any any ## Packet Capture, Rule.. Vlan ACL Map vlan access-map idsm 99 match ip address 99 action forward capture ## VACL Map ## ACL 99 Matching. ## VACL Capture Enable. 3. VACL VLAN vlan filter idsm vlan-list,,999 ## idsm VACL Map Vlan. 4. IDSM Capture Native IOS VACL Capture intrusion-detection module 5 data-port capture intrusion-detection module 5 data-port capture allowed-vlan,,999 ## IDSM module 5 Data-port VACL Capture VACL Capture packet. ## Vlan VACL Capture packet.
30 II. IPS/IDS II.II F. IDSM Packet Capture Vlan ACL Capture. Security ACL Commit set security acl ip IDSM permit ip any any capture commit security acl IDSM ## Security ACL Commit Hybrid OS VACL Capture. VLAN set security acl map IDSM,,999 ## Security ACL Vlan 3. Capture Port set security acl capture-ports 5/7 ## IDSM module 5 Data-port VACL Capture VACL Capture packet. clear security acl IDSM commit security acl IDSM
31 II. IPS/IDS II.II G. IDSM Packet Capture Packet Capture(RSPAN) RSPAN Traffic Capture Traffic IDS Access Switch VTP Domain - Yellow Core Switch Trunk Trunk Source RSPAN Vlan 90 Destination Hybrid OS RSPAN Access Switch set rspan source 4/- 90 rx Core Switch set rspan destination / 90 Native IOS RSPAN Access Switch A monitor session 8 source remote vlan 90 Core Switch monitor session 8 destination interface fastethernet /
32 II. IPS/IDS II.II H. IDSM Packet Capture MLS IP IDS IOS Firewall Feature MLS IP IDS Packet Capture. Access-list ip access-list extended IDS-Capture permit ip any any ## Packet Capture, Rule.. Capture Interface MLS ip ids int vlan mls ip ids IDS-Capture int vlan mls ip ids IDS-Capture ## Interface Vlan MLS ip ids 3. IDSM Capture Native IOS MLS IP IDS intrusion-detection module 5 data-port capture intrusion-detection module 5 data-port capture allowed-vlan, ## Vlan Capture packet
33 II. IPS/IDS II.II H. IDSM Packet Capture MLS IP IDS IOS Firewall Feature MLS IP IDS Packet Capture. Access-list!! MSFC ip access-list extended IDS-Capture permit ip any any ## Packet Capture, Rule.. VLAN!! MSFC 3. Capture Port int vlan mls ip ids IDS-Capture int vlan mls ip ids IDS-Capture ## Interface Vlan MLS ip ids set security acl capture-ports 5/7 ## IDSM module 5 Data-port Vlan Capture packet. Hybrid OS MLS IP IDS
34 Cisco IDSM Easy Config I. IDS II. III. IV. IEV V. Trouble Shooting
35 III. III.I SSL SSL (Secure Socket Layer) IDSM Management Port IP Address Setup Mode ID : cisco (Default) Password : ************ ID,.
36 III. III.II IDM Menu Device Menu Configuration Monitoring Administration Network IDM IP Telnet Service SSH IDM User Interface Alarm Channel Signature IP Fragment TCP Stream IP Log Blocking Autoupdate Default Setting IP Logging Event Display signature Upgrade IP Logging Blocking Blocking System Reset
37 III. III.III IDM Device A. Sensor setup Network Host Name IDSM. IP address IDSM IP address 3. Netmask mask 4. Default Route Gateway 5. Enable TLS/SSL SSL Enable 6. Web Server Port TCP 443 port ## IDSM Setup,.
38 III. III.III IDM Device B. Sensor setup IDM. IDSM IDM IP List. List,, 3 3. Add IP
39 III. III.III IDM Device C. Sensor setup IDS 3. Time Zone. IDSM UTC UTC Offset UTC Offset 540 ~545,. 3. NTP NTP. Server IP, Key, Key ID.
40 III. III.III IDM Device D. Sensor setup IDM. IDSM IDM User User. User,,
41 III. III.III IDM Device D. Sensor setup IDM User User Name, Password 4. User Viewer -Event Config, / Operator - Event, Config, signature Administrator - Service -IDM, CLI
42 III. III.IV IDM Configuration A. Sensing Engine IDS Interface 3 4. IDSM Interface Reset : Interface TCP Reset ( ). IDSM Interface Command, Contorl : Interface ( ) 3. IDSM Interface 7, 8 Sensing Enable : Interface 7, 8 Sensing Interface Select Option Check 4 Enable. Sensing Interface, IDSM.
43 III. III.IV IDM Device A. Sensing Engine IDS Interface Group. Virtual Sensor IDSM Version 4..4 Virtual Sensor Select Box Check Enable. Interface, Interface Group, IDSM. Signature Event Action.
44 III. III.IV IDM Device A. Sensing Engine Signature 3. Signature Enable Top Level Category Enable Top Level Category Enable Top Level Category Disable Signature Enable, Signature Enable Signature Enable.
45 III. III.IV IDM Device A. Sensing Engine Signature. Signature Category All Signature Category Signature Signature Signature Signature ID ID Click SubSig ID. Event Sig ID. Edit SubSig. Signature Name Event Reset, ShunHost ShunConnection Zero, Log Signature Level High, Medium, Low Information Signature Built-In, tuned
46 III. III.IV IDM Device A. Sensing Engine Signature Engine Layer ARP Alarm / ID 7000 ICMP(type,code,Sequence,ID )Alarm / ID 000 IP Option Alarm / ID000 Layer 3 IP Alarm /ID 00,00 TCP flag,port,sigle Packe Regex Alarm / ID 9000,900,3000,3300 UDP port, direction, Data Length Alarm /ID 4000,9000 ICMP Flooding Alarm / ID 00 UDP Flooding Alarm /ID 400 Flooding Alarm / ID 6900 Alarm DNS Service Engine /ID 6000 FTP Service Engine /ID 300 Only TACAS Overflow / ID 3530 String Search HTTP Decoding Engine / ID 5300,500,300,3700,5000,500,500 Client, Server Engine / ID 600 MS-SQL Inspection Engine / ID 3700 Network Time Protocol Engine / ID 4056 RPC Service Engine / ID 600,600 SMB(Service Message Block) Decoding Inspection Engine /ID 3300 SMTP Inspection Engine / ID 300
47 III. III.IV IDM Device A. Sensing Engine Signature SNMP Traffic Inspection Engine / ID 4500 SSH Header Decoding Engine / ID 3600 Syslog Process Telnet Cisco Engine /ID 3600 LPR Protocol Inspection Engine / ID 60 ICMP String Search Engine / ID 00 TCP String Search Engine / ID 300,3500,5300,000,600,3700,3400 UDP String Search Engine / ID 4000,4600,3300,000 ICMP Sweep / ID 00 TCP Sweep / ID 3000 TCP/UDP Sweep /ID 6000 NMAP Sweep,Scan / ID 3045,3046 Host Port Sweep / ID 3000 Host Port Sweep /ID 400,4003 ICMP Traffic Pattern / ID 6300,6500 Back orifice BOK Trojan / ID 3990~ TFNK trojan/ddos Traffic /ID 6507 BO/BOK UDP Trojan Traffic /ID 4053,4055
48 III. III.IV IDM Device A. Sensing Engine Signature Attack Adware,Spyware, Engine / ID 000 Code Attack Engine / ID 300 Data Buffer Overflow Engine / ID 5300 Engine /ID 6500,4300 Attack, Engine /ID 00 ~ 5000, Engine /ID 300,300
49 III. III.IV IDM Device A. Sensing Engine Signature Attack Attack Engine IDS Engine / ID 300 Engine,,PP Engine ID 000 Attack Sweep Check Engine Virus, Worm, Trojans Engine
50 III. III.IV IDM Device A. Sensing Engine Signature L/L3/L4 Protocol ARP Attack Engine Layer ~4 Protocol Attack Engine Protocol Associate Engine IP Attack Engine TCP,UDP Engine
51 III. III.IV IDM Device A. Sensing Engine Signature OS Engine Cisco IOS Engine Mac OS Engine Novel Netware Engine Unix Engine Window Engine
52 III. III.IV IDM Device A. Sensing Engine Signature Releases, Signature Releases Version,, Signature Action.
53 III. III.IV IDM Device A. Sensing Engine Signature Service Network Service
54 III. III.IV IDM Device A. Sensing Engine Signature 3. Signature IDSM Nachi Worm Signature Group Attack Attack Sub Viruses/Worm/Trojans
55 III. III.IV IDM Device A. Sensing Engine Signature Nachi Worm 4 Edit 5 Event Action. Log IP Logging. Reset Event Host IDS TCP Session 3. Shunhost Event Host IDSM Block 4. Shunconnection Event Host Connection IDSM Drop
56 III. III.IV IDM Device A. Sensing Engine Signature 6 Save Changes Signature Configuration Save Changes
57 III. III.IV IDM Device A. Sensing Engine Signature Signature Wizard Signature DB, Signature Signature Wizard Wizard Step by Step Signature, Signature ID Signature Wizard Signature /8 Network TCP Syn Packet Wizard Step by Step Signature, Signature ID 0000
58 III. III.IV IDM Device A. Sensing Engine Signature Signature Type Signature Type Packet Signature TCP Packet Signature 3 Next
59 III. III.IV IDM Device A. Sensing Engine Signature Signature ID Signature ID 3 Signature ID : 0000 Signature Name 4 Next
60 III. III.IV IDM Device A. Sensing Engine Signature TCP Flag TCP 3-handshaking Syn Flag TCP SYN flag True TCP ACK flag - False 3 3 Source IP address range
61 III. III.IV IDM Device A. Sensing Engine Signature Signature - Information / Low / Medium / High Event IDSM - Log / Reset / ShunHost / Shun Connection Signature Wizard
62 III. III.IV IDM Device A. Sensing Engine IP Fragment Reassembly & TCP Stream Reassembly Processor IP Fragment
63 III. III.IV IDM Device A. Sensing Engine IP Fragment Reassembly & TCP Stream Reassembly OS Segment Reassembly, OS NT, Solaris, Linux, BSD Fragment 0000 Timeout - 0 IP Fragment Reassembly TCP (segment).,.,,.
64 III. III.IV IDM Device B. Blocking Blocking TCP Reset IDS -Reset TCP Reset Internet Router RACL / Router TCP Session Reset UDP, ICMP TCP Flag, Reset. Reset, Processor. Shunning - FWSM / PIX PIX VACL 6500 Hybrid OS Core User Access Switch Switch RACL/PACL 6500 Native OS, Cat 4500/4000/3750/3550/950 IDS TCP Reset + Block Interface Sensor Network..
65 III. III.IV IDM Device B. Blocking Blocking 3 4. Blocking 3 4 Blocking Sensor IP Block!!! Check Box IDSM Blocking Block Entry Default Blocking Default 30 Blocking 30, 30 Blocking.
66 III. III.IV IDM Device B. Blocking Blocking IP. Never Block Blocking Address Ex> IP, Server Farm IP Neverblock IP Menu Button,, Block Address
67 III. III.IV IDM Device B. Blocking Blocking Device 3. Blocking Device Block Device Block Device Logical Device Menu Button,, Blocking Device Name Password
68 III. III.IV IDM Device B. Blocking Blocking Device 4. Blocking Device Blocking Device Blocking Device IP address Blocking Device Name Blocking Device Type Cisco Router- Catalyst Native OS 6500 Cat 4500/4000/3750/3550/950 VACL Cat 6500,7600 Hybird OS PIX FWSM, PIX 5 Telnet, SSH
69 III. III.IV IDM Device B. Blocking Blocking Device Interface 5. Blocking Device Interface Blocking Interface Blocking Device IP address Blocking Device ACL Interface Blociking Show ip interface brief Interface Name. Blocking Device Interface ACL Inbound filtering, Outbound filtering Extended ACL
70 III. III.IV IDM Device C. Auto update Auto update Internet Cisco IDS Signature Center 3 FTP Server Cisco IDS Signature (Download URL ) (Signature Update.) Signature Download FTP Server Autoupdate Server IP 3 Cisco IDS FTP or SCP Server Signature. Signature Rebooting.
71 III. III.IV IDM Device C. Auto update Auto update IDS Update.
72 III. III.IV IDM Device C. AutoUpdate Signature Update Auto update Auto update Server IP FTP Server directory FTP Server ID Password File Copy Protocol FTP,SCP 6 7.,.
73 III. III.IV IDM Device D. Restore Default Restore Default Apply to Sensor.!!!,.
74 III. III.IV IDM Device A. Web Server / Block IDSM SSL Configuration Blocking ShunMaxEntries = 00 : 00 ACL NetDevice Blocking Device NeverShun Never Block Address Shun Enable State = Active Blocking Device.
75 III. III.IV IDM Device B. Command & Control Interface Command & Control Port Ip address, Rx,Tx Network Interface Memory 3 3 Swap HDD Swap.
76 III. III.IV IDM Device C. Event /Sensing Interface Event Event Category. Packet Capture Sensing Interface Capture Packet Size 0, Capture.
77 III. III.IV IDM Device D. Virtual Sensor (Interface, CPU ) CPU Configuration Sensing Engine Interface Group Sensing Interface Sensing Group, IDS. Packet total number, Refresh. CPU 0 Configuration Sensing Engine Fragment Fragment Reassembly,TCP Stream Reassembly
78 III. III.V IDM Device A. 3 Diagnostics IDS,Version,interface dump 3 ~. View Result,., configuration, Version, Interface, Dump.
79 III. III.V IDM Device A. IDS Signature Version Main Application, Analysis Engine,, Webserver Processor 3 3 IDS System
80 III. III.V IDM Device B. Update Signature update FTP Signature Engine Upgrade Ex> SCP Signature Engine Upgrade Ex> [ ] CLI Upgrade sensor#config t sensor(config)#upgrade ftp://anonymous@ //ids/ids-sig-4.-3-s64.rpm.pkg Password: Warning: Executing this command will apply a signature update to the application partition. Continue with upgrade? : yes Broadcast message from root (Wed Jan 7 9:05:37 004): Applying update IDS-sig-4.-3-S64. This may take several minutes. Please do not reboot the sensor during this update. Broadcast message from root (Wed Jan 7 9:06:06 004): Update complete. sensorapp is restarting This may take several minutes.
81 III. III.V IDM Device C. Manual Blocking Blocking Host Event Blocking Device ACL Blocking Host Minutes Remaining : ACL ACL, Event ACL. Add : ACL. Delete Blocking Host ACL. 3 Extended ACL Src IP,port,Dst IP,port. 4 Protocol 5 ACL Blocking, Connection Shun 6 Blocking Time
82 III. III.V IDM Device C. Manual Blocking Network Blocking 3 Network Manual Block Blocking Network. Block 3 Blocking Time
83 III. III.V IDM Device D. Manual Blocking Network Blocking IDS system Reset, Power Down
84 Cisco IDSM Easy Config I. IDS II. III. IV. IEV V. Trouble Shooting
85 IV. IV.I IEV A. IEV(IDS Event Viewer) 4. IDS Event Viewer Platform OS Windows NT 4 Service pack 6 Windows 000 Service pack Windows XP Service pack IDS Event Viewer Application Java Runtime.3. ( ) MySQL Server Version 3.3 ( ) IDS Event Viewer H.W Pentium III 800 Mhz 56MB Ram 500MB Hard Disk
86 IV. IV.II IEV A. Device Discover IDS Sensor IP Address Sensor Host Name User Name IDS User Name Password IDS Password Web Server Port SSL 6 http or https Event Start 7 7 Security Level Event Check. Information, Information Check.
87 IV. IV.II IEV B. Device Discover IDSM
88 IV. IV.III IEV A. IEV Menu New View Event Filter New Device Event Graph Event Event Refresh Event Viewer IEV Application Etherreal Data Source Event Import/Export
89 IV. IV.III IEV B. IEV Menu New View Data Source Event Group -Signature,,, Sensor, Security Level 3 3 View Column -Step Column. - display View Sorting
90 IV. IV.III IEV C. IEV Menu Import/Export Import Log File Event Export IEV Event, CSV, TAB.
91 IV. IV.III IEV D. IEV Menu Data Source Information Data Source Information DB Table Data Source DB Table Purge DB Table
92 IV. IV.III IEV E. IEV Menu Application Setting Html Browser IDM Application ( exploer.exe) 3 Ethereal IP Log Dump Data 3 NSDB(Network Signature DataBase) - IEV Version upgrade.
93 IV. IV.III IEV F. IEV Menu Preference IEV Console Display Refresh Time -, Auto Refresh. IEV Console Display Refresh Time IEV Auto Refresh. IEV Menu Refresh.
94 IV. IV.III IEV G. IEV Menu Preference Event Archive File -Event 3:45 Archive File.,. Archive file Size Table : 000 ~,000,000 Archived File : 0 ~ 400 Archived File : 0 ~ 400
95 IV. IV.III IEV H. IEV Menu Event Graph Realtime Graph / Bar Graph / Area Graph Security Level Color Alarm Alarm 6
96 IV. IV.III IEV I. IEV Menu Dashboard Event Dashboard Event, Display. Signature Name, Sig ID, Security Level, Device, UTC or,,,,, Event ID, Trigger Stirng ( Sensing Interface) Sorting.
97 IV. IV.III IEV J. View Menu Event Column -Sorting Signature Count -Sorting -Sorting IDS -Sorting Security Level -Sorting Total Event -Sorting
98 IV. IV.III IEV K. View Menu Sensor Event Sensor Signature Count -Sorting -Sorting -Sorting Security Level -Sorting Total Event -Sorting
99 IV. IV.III IEV L. View Menu Security Level Event Security Level -Sorting Signature Count -Sorting -Sorting -Sorting Sensor ( ~) Total Event -Sorting
100 IV. IV.III IEV M. View Menu Security Level Event Level, - or Setting - DB Signature Sensor Event
101 IV. IV.III IEV N. View Menu Signature Group Event Signature Count -Sorting -Sorting -Sorting Sensor ( ~) Security Level -Sorting Total Event -Sorting
102 IV. IV.III IEV O. View Menu Signature Group Event Level, - or Setting - DB Signature Sensor Event
103 IV. IV.III IEV P. View Menu Event -Sorting Signature Count -Sorting -Sorting Sensor ( ) Security Level -sorting Total Event -Sorting
104 IV. IV.III IEV Q. View Menu Event Level, - or Setting - DB Signature Sensor Security Level Event
105 IV. IV.III IEV R. Filter Menu Event filter Filter Security Level Filtering level ( Information ) Filtering - Filtering - Signature Filtering Signature Sensor filtering Sensor Event Filtering Event status filtering Event.
106 Cisco IDSM Easy Config I. IDS II. III. IV. IEV V. Trouble Shooting
107 V. IDSM Trouble Shooting - FAQ FAQ. Packet Capture???. IDM. 3. IDSM.
108 V. IDSM Trouble Shooting V-I. Packet Capture Issue FAQ. Packet Capture???. Packet Capture Page 7 II.II.E Native/Hybrid OS SPAN. 7600/6500 Packet Capture 653#sh intrusion-detection module data-port state Intrusion-detection module data-port : Switchport: Enabled Administrative Mode: trunk Operational Mode: down Administrative Trunking Encapsulation: dotq Negotiation of Trunking: Off Access Mode VLAN: (default) Trunking Native Mode VLAN: (default) Trunking VLANs Enabled: NONE Pruning VLANs Enabled: -00 Vlans allowed on trunk:none Vlans allowed and active in management domain:none Vlans in spanning tree forwarding state and not pruned: none Administrative Capture Mode: Disabled Administrative Capture Allowed-vlans: 999
109 V. IDSM Trouble Shooting V-I. Packet Capture Issue. 7600/6500 Packet Capture 653#sh intrusion-detection module data-port traffic Intrusion-detection module data-port : Specified interface is up line protocol is down (monitoring) Hardware is C6k 000Mb 80.3, address is 000.fcbe.8a6 (bia 000.fcbe.8a6) MTU 500 bytes, BW Kbit, DLY 0 usec, reliability 55/55, txload 4/55, rxload /55 Encapsulation ARPA, loopback not set Keepalive set (0 sec) Unknown duplex, Unknown Speed, media type is unknown media type output flow-control is unsupported, input flow-control is unsupported Last input never, output 07:5:34, output hang never Last clearing of "show interface" counters never Input queue: 0/000/0/0 (size/max/drops/flushes); Total output drops: 0 Queueing strategy: fifo Output queue: 0/40 (size/max) 5 minute input rate 0 bits/sec, 0 packets/sec 5 minute output rate bits/sec, 976 packets/sec 0 packets input, 0 bytes, 0 no buffer Received 0 broadcasts, 0 runts, 0 giants, 0 throttles 0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored 0 input packets with dribble condition detected packets output, bytes, 0 underruns 0 output errors, 0 collisions, 37 interface resets 0 babbles, 0 late collision, 0 deferred 0 lost carrier, 0 no carrier 0 output buffer failures, 0 output buffers swapped out
110 V. IDSM Trouble Shooting V-I. Packet Capture Issue 3. IDM Sensing Interface Enabled Yes
111 V. IDSM Trouble Shooting V-I. Packet Capture Issue 3. IDM Sensing Interface IDM Monitoring Statistics AnalysisEngine Statistics Sensing Interface Packet Counter.
112 V. IDSM Trouble Shooting V-I. Packet Capture Issue 4. IDSM Sensing Interface 653#sh diagnostic module Current Online Diagnostic Level = Minimal Online Diagnostic Result for Module : PASS Online Diagnostic Level when Module came up = Minimal Test Results: (. = Pass, F = Fail, U = Unknown). TestPortASICLoopback : Port TestPCLoopback : Port 3,4 Sensing Interface Pass. Hybrid show port 7,8 Trunk, Faulty. Port TestNetflowInlineRewrite : Port U U U U
113 V. IDSM Trouble Shooting V-II. IDM FAQ. IDM.. Comman & Control Port (Page 0) Native IOS IDSM IP Vlan intrusion-detection module 5 management-port access-vlan IDSM IP Vlan Hybrid OS IDSM IP Vlan set vlan 5/ IDSM IP Vlan
114 V. IDSM Trouble Shooting V-III. IDSM FAQ 3. IDSM.. MP(Maintenance Partition), AP(Application Partition). Native IOS hw-module module reset cf: MP Mode Booting hw-module module reset AP Mode Booting Hybrid OS Reset cf: MP Mode Booting Reset AP Mode Booting MP Mode AP Image Upgred Network config MP Network Crash Dump Application Partition IDS img,config Application Partition IDS img,config cf cf cf3 cf4 cf5
115 V. IDSM Trouble Shooting V-III. IDSM FAQ 3. IDSM.. MP(Maintenance Partition), Application Partition Image Reloading address gateway broadcast Downloading the image. This may take several minutes... Password for (6559K) /tmp/upgrade.gz [########################] 6559K 64.68K/s bytes transferred in 4.86 sec (64.67k/sec) Upgrade file is downloaded. Upgrading will wipe out the contents on the hard disk. Do you want to proceed installing it [y N]: y Proceeding with upgrade. Please do not interrupt. If the upgrade is interrupted or fails, boot into Maintenance image again and restart upgrade. Creating IDS application image file... Initializing the hard disk... Applying the image, this process may take several minutes... Performing post install, please wait... Application image upgrade complete. You can boot the image now.
116 V. IDSM Trouble Shooting V-III. IDSM FAQ 3. IDSM. 3. MP (Maintenance Partition) Application Partition Image Reloading,., Setup. Setup Signature Service Pack Install. Service Pack Install, Rebooting. Signature File Install. sensor(config)# upgrade Password: Warning: Executing this command will apply a signature update to the application partition. Continue with upgrade? : yes Broadcast message from root (Wed Jan 7 9:05:37 004): Applying update IDS-sig-4.-3-S64. This may take several minutes. Please do not reboot the sensor during this update. Broadcast message from root (Wed Jan 7 9:06:06 004): Update complete. sensorapp is restarting This may take several minutes.
Remote UI Guide
Remote UI KOR Remote UI Remote UI PDF Adobe Reader/Adobe Acrobat Reader. Adobe Reader/Adobe Acrobat Reader Adobe Systems Incorporated.. Canon. Remote UI GIF Adobe Systems Incorporated Photoshop. ..........................................................
1217 WebTrafMon II
(1/28) (2/28) (10 Mbps ) Video, Audio. (3/28) 10 ~ 15 ( : telnet, ftp ),, (4/28) UDP/TCP (5/28) centralized environment packet header information analysis network traffic data, capture presentation network
Network seminar.key
Intro to Network .. 2 4 ( ) ( ). ?!? ~! This is ~ ( ) /,,,???? TCP/IP Application Layer Transfer Layer Internet Layer Data Link Layer Physical Layer OSI 7 TCP/IP Application Layer Transfer Layer 3 4 Network
UDP Flooding Attack 공격과 방어
황 교 국 (fullc0de@gmail.com) SK Infosec Co., Inc MSS Biz. Security Center Table of Contents 1. 소개...3 2. 공격 관련 Protocols Overview...3 2.1. UDP Protocol...3 2.2. ICMP Protocol...4 3. UDP Flood Test Environment...5
Solaris Express Developer Edition
Solaris Express Developer Edition : 2008 1 Solaris TM Express Developer Edition Solaris OS. Sun / Solaris, Java, Web 2.0,,. Developer Solaris Express Developer Edition System Requirements. 768MB. SPARC
ORANGE FOR ORACLE V4.0 INSTALLATION GUIDE (Online Upgrade) ORANGE CONFIGURATION ADMIN O
Orange for ORACLE V4.0 Installation Guide ORANGE FOR ORACLE V4.0 INSTALLATION GUIDE...1 1....2 1.1...2 1.2...2 1.2.1...2 1.2.2 (Online Upgrade)...11 1.3 ORANGE CONFIGURATION ADMIN...12 1.3.1 Orange Configuration
본교재는수업용으로제작된게시물입니다. 영리목적으로사용할경우저작권법제 30 조항에의거법적처벌을받을수있습니다. [ 실습 ] 스위치장비초기화 1. NVRAM 에저장되어있는 'startup-config' 파일이있다면, 삭제를실시한다. SWx>enable SWx#erase sta
![본교재는수업용으로제작된게시물입니다. 영리목적으로사용할경우저작권법제 30 조항에의거법적처벌을받을수있습니다. [ 실습 ] 스위치장비초기화 1. NVRAM 에저장되어있는 'startup-config' 파일이있다면, 삭제를실시한다. SWx>enable SWx#erase sta](/thumbs/88/116915514.jpg "본교재는수업용으로제작된게시물입니다. 영리목적으로사용할경우저작권법제 30 조항에의거법적처벌을받을수있습니다. [ 실습 ] 스위치장비초기화 1. NVRAM 에저장되어있는 'startup-config' 파일이있다면, 삭제를실시한다. SWx>enable SWx#erase sta")
[ 실습 ] 스위치장비초기화 1. NVRAM 에저장되어있는 'startup-config' 파일이있다면, 삭제를실시한다. SWx>enable SWx#erase startup-config Erasing the nvram filesystem will remove all configuration files Continue? [confirm] ( 엔터 ) [OK] Erase
PCServerMgmt7
Web Windows NT/2000 Server DP&NM Lab 1 Contents 2 Windows NT Service Provider Management Application Web UI 3 . PC,, Client/Server Network 4 (1),,, PC Mainframe PC Backbone Server TCP/IP DCS PLC Network
TCP.IP.ppt
TCP/IP TCP/IP TCP/IP TCP/IP TCP/IP Internet Protocol _ IP Address Internet Protocol _ Subnet Mask Internet Protocol _ ARP(Address Resolution Protocol) Internet Protocol _ RARP(Reverse Address Resolution
ARMBOOT 1
100% 2003222 : : : () PGPnet 1 (Sniffer) 1, 2,,, (Sniffer), (Sniffer),, (Expert) 3, (Dashboard), (Host Table), (Matrix), (ART, Application Response Time), (History), (Protocol Distribution), 1 (Select
소개 TeraStation 을 구입해 주셔서 감사합니다! 이 사용 설명서는 TeraStation 구성 정보를 제공합니다. 제품은 계속 업데이트되므로, 이 설명서의 이미지 및 텍스트는 사용자가 보유 중인 TeraStation 에 표시 된 이미지 및 텍스트와 약간 다를 수
사용 설명서 TeraStation Pro II TS-HTGL/R5 패키지 내용물: 본체 (TeraStation) 이더넷 케이블 전원 케이블 TeraNavigator 설치 CD 사용 설명서 (이 설명서) 제품 보증서 www.buffalotech.com 소개 TeraStation 을 구입해 주셔서 감사합니다! 이 사용 설명서는 TeraStation 구성 정보를
PowerPoint 프레젠테이션
(Host) set up : Linux Backend RS-232, Ethernet, parallel(jtag) Host terminal Target terminal : monitor (Minicom) JTAG Cross compiler Boot loader Pentium Redhat 9.0 Serial port Serial cross cable Ethernet
PWR PWR HDD HDD USB USB Quick Network Setup Guide xdsl/cable Modem PC DVR 1~3 1.. DVR DVR IP xdsl Cable xdsl Cable PC PC DDNS (
PWR PWR HDD HDD USB USB Quick Network Setup Guide xdsl/cable Modem PC DVR 1~3 1.. DVR DVR IP xdsl Cable xdsl Cable PC PC DDNS (http://ddns.hanwha-security.com) Step 1~5. Step, PC, DVR Step 1. Cable Step
USB USB DV25 DV25 REC SRN-475S REC SRN-475S LAN POWER LAN POWER Quick Network Setup Guide xdsl/cable Modem PC DVR 1~3 1.. DVR DVR IP xdsl Cable xdsl C
USB USB DV25 DV25 REC SRN-475S REC SRN-475S LAN POWER LAN POWER Quick Network Setup Guide xdsl/cable Modem PC DVR 1~3 1.. DVR DVR IP xdsl Cable xdsl Cable PC PC Step 1~5. Step, PC, DVR Step 1. Cable Step
MAX+plus II Getting Started - 무작정따라하기
무작정 따라하기 2001 10 4 / Version 20-2 0 MAX+plus II Digital, Schematic Capture MAX+plus II, IC, CPLD FPGA (Logic) ALTERA PLD FLEX10K Series EPF10K10QC208-4 MAX+plus II Project, Schematic, Design Compilation,
10X56_NWG_KOR.indd
디지털 프로젝터 X56 네트워크 가이드 이 제품을 구입해 주셔서 감사합니다. 본 설명서는 네트워크 기능 만을 설명하기 위한 것입니다. 본 제품을 올바르게 사 용하려면 이 취급절명저와 본 제품의 다른 취급절명저를 참조하시기 바랍니다. 중요한 주의사항 이 제품을 사용하기 전에 먼저 이 제품에 대한 모든 설명서를 잘 읽어 보십시오. 읽은 뒤에는 나중에 필요할 때
untitled
CAN BUS RS232 Line Ethernet CAN H/W FIFO RS232 FIFO IP ARP CAN S/W FIFO TERMINAL Emulator COMMAND Interpreter ICMP TCP UDP PROTOCOL Converter TELNET DHCP C2E SW1 CAN RS232 RJ45 Power
4. 스위치재부팅을실시한다. ( 만약, Save 질문이나오면 'no' 를실시한다.) SWx#reload System configuration has been modified. Save? [yes/no]: no Proceed with reload? [confirm] (
![4. 스위치재부팅을실시한다. ( 만약, Save 질문이나오면 'no' 를실시한다.) SWx#reload System configuration has been modified. Save? [yes/no]: no Proceed with reload? [confirm] (](/thumbs/91/104875642.jpg "4. 스위치재부팅을실시한다. ( 만약, Save 질문이나오면 'no' 를실시한다.) SWx#reload System configuration has been modified. Save? [yes/no]: no Proceed with reload? [confirm] (")
[ 실습 ] 스위치장비초기화 1. NVRAM 에저장되어있는 'startup-config' 파일이있다면, 삭제를실시한다. SWx>enable SWx#erase startup-config Erasing the nvram filesystem will remove all configuration files Continue? [confirm] ( 엔터 ) [OK] Erase
Subnet Address Internet Network G Network Network class B networ
Structure of TCP/IP Internet Internet gateway (router) Internet Address Class A Class B Class C 0 8 31 0 netid hostid 0 16 31 1 0 netid hostid 0 24 31 1 1 0 netid hostid Network Address : (A) 1 ~ 127,
<C0CCBCBCBFB52DC1A4B4EBBFF82DBCAEBBE7B3EDB9AE2D313939392D382E687770>
i ii iii iv v vi 1 2 3 4 가상대학 시스템의 국내외 현황 조사 가상대학 플랫폼 개발 이상적인 가상대학시스템의 미래상 제안 5 웹-기반 가상대학 시스템 전통적인 교수 방법 시간/공간 제약을 극복한 학습동기 부여 교수의 일방적인 내용전달 교수와 학생간의 상호작용 동료 학생들 간의 상호작용 가상대학 운영 공지사항,강의록 자료실, 메모 질의응답,
Microsoft PowerPoint - 2.Catalyst Switch Intrastructure Protection_이충용_V1 0.ppt [호환 모드]
![Microsoft PowerPoint - 2.Catalyst Switch Intrastructure Protection_이충용_V1 0.ppt [호환 모드]](/thumbs/74/69694488.jpg "Microsoft PowerPoint - 2.Catalyst Switch Intrastructure Protection_이충용_V1 0.ppt [호환 모드]")
Catalyst Switch Infrastructure Protection Cisco Systems Korea SE 이충용 (choolee@cisco.com) Overview DoS (Denial of Service) 공격대상 - Server Resource - Network Resource - Network devices (Routers, Firewalls
o o o 8.2.1. Host Error 8.2.2. Message Error 8.2.3. Recipient Error 8.2.4. Error 8.2.5. Host 8.5.1. Rule 8.5.2. Error 8.5.3. Retry Rule 8.11.1. Intermittently
Orcad Capture 9.x
OrCAD Capture Workbook (Ver 10.xx) 0 Capture 1 2 3 Capture for window 4.opj ( OrCAD Project file) Design file Programe link file..dsn (OrCAD Design file) Design file..olb (OrCAD Library file) file..upd
SMB_ICMP_UDP(huichang).PDF
SMB(Server Message Block) UDP(User Datagram Protocol) ICMP(Internet Control Message Protocol) SMB (Server Message Block) SMB? : Microsoft IBM, Intel,. Unix NFS. SMB client/server. Client server request
Copyright 2012, Oracle and/or its affiliates. All rights reserved.,,,,,,,,,,,,,.,..., U.S. GOVERNMENT END USERS. Oracle programs, including any operat
Sun Server X3-2( Sun Fire X4170 M3) Oracle Solaris : E35482 01 2012 9 Copyright 2012, Oracle and/or its affiliates. All rights reserved.,,,,,,,,,,,,,.,..., U.S. GOVERNMENT END USERS. Oracle programs, including
bn2019_2
arp -a Packet Logging/Editing Decode Buffer Capture Driver Logging: permanent storage of packets for offline analysis Decode: packets must be decoded to human readable form. Buffer: packets must temporarily
휠세미나3 ver0.4
andromeda@sparcs:/$ ls -al dev/sda* brw-rw---- 1 root disk 8, 0 2014-06-09 18:43 dev/sda brw-rw---- 1 root disk 8, 1 2014-06-09 18:43 dev/sda1 brw-rw---- 1 root disk 8, 2 2014-06-09 18:43 dev/sda2 andromeda@sparcs:/$
untitled
1... 2 System... 3... 3.1... 3.2... 3.3... 4... 4.1... 5... 5.1... 5.2... 5.2.1... 5.3... 5.3.1 Modbus-TCP... 5.3.2 Modbus-RTU... 5.3.3 LS485... 5.4... 5.5... 5.5.1... 5.5.2... 5.6... 5.6.1... 5.6.2...
TTA Verified : HomeGateway :, : (NEtwork Testing Team)
TTA Verified : HomeGateway :, : (NEtwork Testing Team) : TTA-V-N-05-006-CC11 TTA Verified :2006 6 27 : 01 : 2005 7 18 : 2/15 00 01 2005 7 18 2006 6 27 6 7 9 Ethernet (VLAN, QoS, FTP ) (, ) : TTA-V-N-05-006-CC11
hd1300_k_v1r2_Final_.PDF
Starter's Kit for HelloDevice 1300 Version 11 1 2 1 2 3 31 32 33 34 35 36 4 41 42 43 5 51 52 6 61 62 Appendix A (cross-over) IP 3 Starter's Kit for HelloDevice 1300 1 HelloDevice 1300 Starter's Kit HelloDevice
Copyright 2012, Oracle and/or its affiliates. All rights reserved.,.,,,,,,,,,,,,.,...,. U.S. GOVERNMENT END USERS. Oracle programs, including any oper
Windows Netra Blade X3-2B( Sun Netra X6270 M3 Blade) : E37790 01 2012 9 Copyright 2012, Oracle and/or its affiliates. All rights reserved.,.,,,,,,,,,,,,.,...,. U.S. GOVERNMENT END USERS. Oracle programs,
Sena Device Server Serial/IP TM Version
Sena Device Server Serial/IP TM Version 1.0.0 2005. 3. 7. Release Note Revision Date Name Description V1.0.0 2005-03-7 HJ Jeon Serial/IP 4.3.2 ( ) 210 137-130, : (02) 573-5422 : (02) 573-7710 email: support@sena.com
PRO1_04E [읽기 전용]
![PRO1_04E [읽기 전용]](/thumbs/91/104875613.jpg "PRO1_04E [읽기 전용]")
Siemens AG 1999 All rights reserved File: PRO1_04E1 Information and S7-300 2 S7-400 3 EPROM / 4 5 6 HW Config 7 8 9 CPU 10 CPU : 11 CPU : 12 CPU : 13 CPU : / 14 CPU : 15 CPU : / 16 HW 17 HW PG 18 SIMATIC
CD-RW_Advanced.PDF
HP CD-Writer Program User Guide - - Ver. 2.0 HP CD-RW Adaptec Easy CD Creator Copier, Direct CD. HP CD-RW,. Easy CD Creator 3.5C, Direct CD 3.0., HP. HP CD-RW TEAM ( 02-3270-0803 ) < > 1. CD...3 CD...5
chapter4
Basic Netw rk 1. ก ก ก 2. 3. ก ก 4. ก 2 1. 2. 3. 4. ก 5. ก 6. ก ก 7. ก 3 ก ก ก ก (Mainframe) ก ก ก ก (Terminal) ก ก ก ก ก ก ก ก 4 ก (Dumb Terminal) ก ก ก ก Mainframe ก CPU ก ก ก ก 5 ก ก ก ก ก ก ก ก ก ก
Assign an IP Address and Access the Video Stream - Installation Guide
설치 안내서 IP 주소 할당 및 비디오 스트림에 액세스 책임 본 문서는 최대한 주의를 기울여 작성되었습니다. 잘못되거나 누락된 정보가 있는 경우 엑시스 지사로 알려 주시기 바랍니다. Axis Communications AB는 기술적 또는 인쇄상의 오류에 대해 책 임을 지지 않으며 사전 통지 없이 제품 및 설명서를 변경할 수 있습니다. Axis Communications
목차 제 1 장 inexio Touch Driver소개... 3 1.1 소개 및 주요 기능... 3 1.2 제품사양... 4 제 2 장 설치 및 실행... 5 2.1 설치 시 주의사항... 5 2.2 설치 권고 사양... 5 2.3 프로그램 설치... 6 2.4 하드웨
최종 수정일: 2010.01.15 inexio 적외선 터치스크린 사용 설명서 [Notes] 본 매뉴얼의 정보는 예고 없이 변경될 수 있으며 사용된 이미지가 실제와 다를 수 있습니다. 1 목차 제 1 장 inexio Touch Driver소개... 3 1.1 소개 및 주요 기능... 3 1.2 제품사양... 4 제 2 장 설치 및 실행... 5 2.1 설치 시
PowerChute Personal Edition v3.1.0 에이전트 사용 설명서
PowerChute Personal Edition v3.1.0 990-3772D-019 4/2019 Schneider Electric IT Corporation Schneider Electric IT Corporation.. Schneider Electric IT Corporation,,,.,. Schneider Electric IT Corporation..
R50_51_kor_ch1
S/N : 1234567890123 Boot Device Priority NumLock [Off] Enable Keypad [By NumLock] Summary screen [Disabled] Boor-time Diagnostic Screen [Disabled] PXE OPROM [Only with F12]
K7VT2_QIG_v3
1......... 2 3..\ 4 5 [R] : Enter Raid setup utility 6 Press[A]keytocreateRAID RAID Type: JBOD RAID 0 RAID 1: 2 7 " RAID 0 Auto Create Manual Create: 2 RAID 0 Block Size: 16K 32K
untitled
Push... 2 Push... 4 Push... 5 Push... 13 Push... 15 1 FORCS Co., LTD A Leader of Enterprise e-business Solution Push (Daemon ), Push Push Observer. Push., Observer. Session. Thread Thread. Observer ID.
네트워크 안정성을 지켜줄 최고의 기술과 성능 TrusGuard는 국내 최초의 통합보안솔루션으로서 지난 5년간 약 4천여 고객 사이트에 구축 운영되면서 기술의 안정성과 성능면에서 철저한 시장 검증을 거쳤습니다. 또한 TrusGuard는 단독 기능 또는 복합 기능 구동 시
네트워크 보안도 안철수연구소입니다 통합 보안의 No.1 파트너, AhnLab TrusGuard 네트워크 환경을 수호하는 최고의 통합 보안 시스템 고성능 방화벽ㆍVPN Security 기술과 고품질 Integrated Security 기술의 강력한 결합 네트워크 안정성을 지켜줄 최고의 기술과 성능 TrusGuard는 국내 최초의 통합보안솔루션으로서 지난 5년간
시스코 무선랜 설치운영 매뉴얼(AP1200s_v1.1)
[ Version 1.3 ] Access Point,. Access Point IP 10.0.0.1, Subnet Mask 255.255.255.224, DHCP Client. DHCP Server IP IP,, IP 10.0.0.X. (Tip: Auto Sensing Straight, Cross-over.) step 1]. step 2] LAN. step
목차 소프트웨어 라이센스 계약 3 무선 연결 사용 시 참고 사항 4 보안 관련 참고 사항 6 Wireless Manager mobile edition 5.5 로 수행 가능한 작업 7 컴퓨터 확인 10 컴퓨터를 연결하기 위해 필요한 환경 10 소프트웨어 설치 / 제거 1
Windows 사용 설명서 Wireless Manager ME 5.5 Wireless Manager mobile edition 5.5 F1111-0 KOREAN WM-LY8JC-K 목차 소프트웨어 라이센스 계약 3 무선 연결 사용 시 참고 사항 4 보안 관련 참고 사항 6 Wireless Manager mobile edition 5.5 로 수행 가능한 작업
*****
Korea Internet & Security Agency 21 2 본 보고서 내용의 전부나 일부를 인용하는 경우에는 반드시 출처 [자료:한국인터넷진흥원 인터넷침해대응센터]를 명시하여 주시기 바랍니다. CONTENTS 1 2 2 2 3 3 4 5 5 6 6 7 9 1 12 12 13 13 14 16 18 2 21 22 22 34 37 38 1 212 Bot
05Àå
CHAPTER 05 NT,, XP,. NT NTFS, XP. D,,. XP x NT,,, ( x, x ). NT/ /XP,.. PC NT NT. + Guide to Software: Understanding and Installing Windows 2000 and Windows NT + SOFTWARE Guide to Software 3/e SOFTWARE
Mars OS 1.0.2 System Administration Guide
Mars OS 1.0.2 시스템 관리 가이드 NetApp, Inc. www.netapp.com/kr 부품 번호:215-09731_A0 2015년 2월 4일 수요일 2 목차 목차 Mars OS 정보 12 Mars OS의 기능 13 고성능 13 업계 최고의 스토리지 효율성 13 시스템 모니터링 13 비휘발성 메모리를 사용하여 안정성 및 성능 향상 13 클러스터링
제20회_해킹방지워크샵_(이재석)
IoT DDoS DNS (jaeseog@sherpain.net) (www.sherpain.net) DDoS DNS DDoS / DDoS(Distributed DoS)? B Asia Broadband B Bots connect to a C&C to create an overlay network (botnet) C&C Provider JP Corp. Bye Bye!
<목 차 > 제 1장 일반사항 4 I.사업의 개요 4 1.사업명 4 2.사업의 목적 4 3.입찰 방식 4 4.입찰 참가 자격 4 5.사업 및 계약 기간 5 6.추진 일정 6 7.사업 범위 및 내용 6 II.사업시행 주요 요건 8 1.사업시행 조건 8 2.계약보증 9 3
열차운행정보 승무원 확인시스템 구축 제 안 요 청 서 2014.6. 제 1장 일반사항 4 I.사업의 개요 4 1.사업명 4 2.사업의 목적 4 3.입찰 방식 4 4.입찰 참가 자격 4 5.사업 및 계약 기간 5 6.추진 일정 6 7.사업 범위 및 내용 6 II.사업시행 주요 요건 8 1.사업시행 조건 8 2.계약보증 9 3.시운전 및 하자보증 10
Microsoft PowerPoint - ch07.ppt
chapter 07. 시스코라우터기본동작 한빛미디어 -1- 학습목표 시스코라우터외적, 내적구성요소 시스코라우터부팅단계 시스코라우터명령어모드 한빛미디어 -2- 시스코라우터구성요소 라우터외부구성요소 (1) [ 그림 ] 2600 라우터전면도 인터페이스카드 전원부 LED 라우터조건 한빛미디어 -3- 시스코라우터구성요소 라우터외부구성요소 (2) [ 그림 ] VTY 를이용한라우터접속
Windows 네트워크 사용 설명서
Windows 네트워크 사용 설명서 (Wireless Manager mobile edition 5.5) 그림의 예로 사용된 프로젝터는 PT-FW300NTEA 입니다. 한국어 TQBH0205-5 (K) 목차 소프트웨어 라이센스 계약 3 무선 연결 사용 시 참고 사항 4 보안 관련 참고 사항 6 소프트웨어 요구 사항 12 시스템 요구 사항 12 Wireless
Analytics > Log & Crash Search > Unity ios SDK [Deprecated] Log & Crash Unity ios SDK. TOAST SDK. Log & Crash Unity SDK Log & Crash Search. Log & Cras
![Analytics > Log & Crash Search > Unity ios SDK [Deprecated] Log & Crash Unity ios SDK. TOAST SDK. Log & Crash Unity SDK Log & Crash Search. Log & Cras](/thumbs/101/151500399.jpg "Analytics > Log & Crash Search > Unity ios SDK [Deprecated] Log & Crash Unity ios SDK. TOAST SDK. Log & Crash Unity SDK Log & Crash Search. Log & Cras")
Analytics > Log & Crash Search > Unity ios SDK [Deprecated] Log & Crash Unity ios SDK. TOAST SDK. Log & Crash Unity SDK Log & Crash Search. Log & Crash Unity SDK... Log & Crash Search. - Unity3D v4.0 ios
LCD Display
LCD Display SyncMaster 460DRn, 460DR VCR DVD DTV HDMI DVI to HDMI LAN USB (MDC: Multiple Display Control) PC. PC RS-232C. PC (Serial port) (Serial port) RS-232C.. > > Multiple Display
본교재는수업용으로제작된게시물입니다. 영리목적으로사용할경우저작권법제 30 조항에의거법적처벌을받을수있습니다. 제 28 장이더체널 블로그 : net123.tistory.com 저자김정우
제 28 장이더체널 블로그 : net123.tistory.com - 1 - 저자김정우 이더체널 (Etherchannel) 이더체널는스위치간에연결된다수의포트를논리적인하나의포트로구성하여대역폭확장과이중화링크구현기능을수행한다. 예를들어스위치 F0/1~F0/4 포트를이더체널로구성하면, 400M 대역폭을제공하는논리적인포트를구성할수있다. 또한, F0/1 포트가장애가발생되면,
歯CRM개괄_허순영.PDF
CRM 2000. 8. KAIST CRM CRM CRM CRM :,, KAIST : 50%-60%, 20% 60%-80%. AMR Research 10.. CRM. 5. Harvard Business review 60%, 13%. Michaelson & Associates KAIST CRM? ( ),,, -,,, CRM needs,,, dynamically
Network Security - Wired Sniffing 실습 ICNS Lab. Kyung Hee University
Network Security - Wired Sniffing 실습 ICNS Lab. Kyung Hee University Outline Network Network 구조 Source-to-Destination 간 packet 전달과정 Packet Capturing Packet Capture 의원리 Data Link Layer 의동작 Wired LAN Environment
Microsoft PowerPoint - ch13.ppt
chapter 13. 네트워크보안과 ACL 한빛미디어 -1- 학습목표 계층별네트워크보안이슈 시스코라우터의 ACL 시스코라우터의 ACL 설정 한빛미디어 -2- 계층별네트워크보안이슈 데이터링크계층보안 ARP 스푸핑 MAC 플러딩 한빛미디어 -3- 계층별네트워크보안이슈 방화벽 [ 그림 ] 방화벽구조 한빛미디어 -4- 계층별네트워크보안이슈 침입탐지시스템 (IDS)
Smart Power Scope Release Informations.pages
v2.3.7 (2017.09.07) 1. Galaxy S8 2. SS100, SS200 v2.7.6 (2017.09.07) 1. SS100, SS200 v1.0.7 (2017.09.07) [SHM-SS200 Firmware] 1. UART Command v1.3.9 (2017.09.07) [SHM-SS100 Firmware] 1. UART Command SH모바일
StruxureWare Data Center Expert 7.2.x 의 새 기능 StruxureWare Data Center Expert 7.2.x 릴리스에서 사용할 수 있는 새 기능에 대해 자세히 알아보십시오. 웹 클라이언트 시작 화면: StruxureWare Cen
Online Help StruxureWare Data Center Expert Version 7.2.4 StruxureWare Data Center Expert 7.2.x 의 새 기능 StruxureWare Data Center Expert 7.2.x 릴리스에서 사용할 수 있는 새 기능에 대해 자세히 알아보십시오. 웹 클라이언트 시작 화면: StruxureWare
6주차.key
6, Process concept A program in execution Program code PCB (process control block) Program counter, registers, etc. Stack Heap Data section => global variable Process in memory Process state New Running
VZ94-한글매뉴얼
KOREAN / KOREAN VZ9-4 #1 #2 #3 IR #4 #5 #6 #7 ( ) #8 #9 #10 #11 IR ( ) #12 #13 IR ( ) #14 ( ) #15 #16 #17 (#6) #18 HDMI #19 RGB #20 HDMI-1 #21 HDMI-2 #22 #23 #24 USB (WLAN ) #25 USB ( ) #26 USB ( ) #27
Microsoft Word Question.doc
1. Switching 1. Frame-relay 구성 PVC만을사용할수있으며어떠한 Dynamic Circuit도허용되지않는다. FR 구간을설정하시오 A. R3, R4, R5를제외한나머지 Router에서는 Sub interface를사용할수없다. B. R4, R5는 FR point-to-point로구성하고, R3는 multipoint로구성하되반드시 subinterface를이용하여구성하시오.
Microsoft PowerPoint - XAD-400.ppt [호환 모드]
![Microsoft PowerPoint - XAD-400.ppt [호환 모드]](/thumbs/40/22073893.jpg "Microsoft PowerPoint - XAD-400.ppt [호환 모드]")
4Ch H.264 Hardware Codec H.264 User s Manual VER 2.0 4 Channel Real-time playback / USB backup The most stable and reliable real stand alone Digital Video Multiplex Recorder 설치 및 사용시 주의사항 초기설치 및 사용시 주의사항
OPCTalk for Hitachi Ethernet 1 2. Path. DCOMwindow NT/2000 network server. Winsock update win95. . . 3 Excel CSV. Update Background Thread Client Command Queue Size Client Dynamic Scan Block Block
ÀÎÅÍ³Ý ÁøÈï¿ø 3¿ù ÀúÇØ»ó
Korea Internet & Security Agency 21 3 CONTENTS 1 2 2 2 3 3 4 5 5 6 6 7 9 1 12 12 13 13 14 16 18 2 21 22 22 31 34 35 1 213 Bot 1,85 1,32 16.7 1,53 1,76 12.1 222 317 3. 116 16 9.4% 345 23 5.% 267 233 14.6%
Interstage5 SOAP서비스 설정 가이드
Interstage 5 Application Server ( Solaris ) SOAP Service Internet Sample Test SOAP Server Application SOAP Client Application CORBA/SOAP Server Gateway CORBA/SOAP Gateway Client INTERSTAGE SOAP Service
1.LAN의 특징과 각종 방식
0 Chapter 1. LAN I. LAN 1. - - - - Switching - 2. LAN - (Topology) - (Cable) - - 2.1 1) / LAN - - (point to point) 2) LAN - 3) LAN - 2.2 1) Bound - - (Twisted Pair) - (Coaxial cable) - (Fiber Optics) 1
ODS-FM1
OPTICAL DISC ARCHIVE FILE MANAGER ODS-FM1 INSTALLATION GUIDE [Korean] 1st Edition (Revised 4) 상표 Microsoft, Windows 및 Internet Explorer는 미국 및 / 또는 다른 국가에서 Microsoft Corporation 의 등록 상표입 Intel 및 Intel Core
본문서는 초급자들을 대상으로 최대한 쉽게 작성하였습니다. 본문서에서는 설치방법만 기술했으며 자세한 설정방법은 검색을 통하시기 바랍니다. 1. 설치개요 워드프레스는 블로그 형태의 홈페이지를 빠르게 만들수 있게 해 주는 프로그램입니다. 다양한 기능을 하는 플러그인과 디자인
스마일서브 CLOUD_Virtual 워드프레스 설치 (WORDPRESS INSTALL) 스마일서브 가상화사업본부 Update. 2012. 09. 04. 본문서는 초급자들을 대상으로 최대한 쉽게 작성하였습니다. 본문서에서는 설치방법만 기술했으며 자세한 설정방법은 검색을 통하시기 바랍니다. 1. 설치개요 워드프레스는 블로그 형태의 홈페이지를 빠르게 만들수 있게
인켈(국문)pdf.pdf
M F - 2 5 0 Portable Digital Music Player FM PRESET STEREOMONO FM FM FM FM EQ PC Install Disc MP3/FM Program U S B P C Firmware Upgrade General Repeat Mode FM Band Sleep Time Power Off Time Resume Load
ETL_project_best_practice1.ppt
ETL ETL Data,., Data Warehouse DataData Warehouse ETL tool/system: ETL, ETL Process Data Warehouse Platform Database, Access Method Data Source Data Operational Data Near Real-Time Data Modeling Refresh/Replication
슬라이드 1
사용 전에 사용자 주의 사항을 반드시 읽고 정확하게 지켜주시기 바랍니다. 사용설명서의 구성품 형상과 색상은 실제와 다를 수 있습니다. 사용설명서의 내용은 제품의 소프트웨어 버전이나 통신 사업자의 사정에 따라 다를 수 있습니다. 본 사용설명서는 저작권법에 의해 보호를 받고 있습니다. 본 사용설명서는 주식회사 블루버드소프트에서 제작한 것으로 편집 오류, 정보 누락
FileMaker 15 WebDirect 설명서
FileMaker 15 WebDirect 2013-2016 FileMaker, Inc.. FileMaker, Inc. 5201 Patrick Henry Drive Santa Clara, California 95054 FileMaker FileMaker Go FileMaker, Inc.. FileMaker WebDirect FileMaker, Inc... FileMaker.
untitled
R&S Power Viewer Plus For NRP Sensor 1.... 3 2....5 3....6 4. R&S NRP...7 -.7 - PC..7 - R&S NRP-Z4...8 - R&S NRP-Z3... 8 5. Rohde & Schwarz 10 6. R&S Power Viewer Plus.. 11 6.1...12 6.2....13 - File Menu...
1. GigE Camera Interface를 위한 최소 PC 사양 CPU : Intel Core 2 Duo, 2.4GHz이상 RAM : 2GB 이상 LANcard : Intel PRO/1000xT 이상 VGA : PCI x 16, VRAM DDR2 RAM 256MB
Revision 1.0 Date 11th Nov. 2013 Description Established. Page Page 1 of 9 1. GigE Camera Interface를 위한 최소 PC 사양 CPU : Intel Core 2 Duo, 2.4GHz이상 RAM : 2GB 이상 LANcard : Intel PRO/1000xT 이상 VGA : PCI x
cam_IG.book
설치 안내서 AXIS P3301 고정형 돔 네트워크 카메라 AXIS P3301-V 고정형 돔 네트워크 카메라 한국어 AXIS P3304 고정형 돔 네트워크 카메라 AXIS P3304-V 고정형 돔 네트워크 카메라 문서 정보 본 문서에는 사용자 네트워크에 AXIS P3301/P3304 고정형 돔 네트워크 카메라를 설치하는 방법에 대 한 지침이 포함되어 있습니다.
untitled
PowerBuilder 連 Microsoft SQL Server database PB10.0 PB9.0 若 Microsoft SQL Server 料 database Profile MSS 料 (Microsoft SQL Server database interface) 行了 PB10.0 了 Sybase 不 Microsoft 料 了 SQL Server 料 PB10.0
APOGEE Insight_KR_Base_3P11
Technical Specification Sheet Document No. 149-332P25 September, 2010 Insight 3.11 Base Workstation 그림 1. Insight Base 메인메뉴 Insight Base Insight Insight Base, Insight Base Insight Base Insight Windows
Cisco SDN 3.0 DDoS DDoS Cisco DDoS Real Demo 2008 Cisco Systems, Inc. All rights reserved. 2
SDN DDoS (whchoi@cisco.com) Cisco Systems Korea 2008 Cisco Systems, Inc. All rights reserved. 1 Cisco SDN 3.0 DDoS DDoS Cisco DDoS Real Demo 2008 Cisco Systems, Inc. All rights reserved. 2 Cisco SDN 3.0
s SINUMERIK 840C Service and User Manual DATA SAVING & LOADING & & /
SINUMERIK 840C Service and Uer Manual DATA SAVING & LOADING & & / / NC, RS232C /. NC NC / Computer link () Device ( )/PC / / Print erial Data input RS232C () Data output Data management FLOPPY DRIVE, FLOPPY
vm-웨어-앞부속
VMware vsphere 4 This document was created using the official VMware icon and diagram library. Copyright 2009 VMware, Inc. All rights reserved. This product is protected by U.S. and international copyright
침입방지솔루션도입검토보고서
IT 2005. 06. 02. IT IT Windows 3503 4463 4178 64% Solaris 142 56 36 Digital UX 37 24 9 Tru64 30 20 26 Server & DeskTop UNIX HP-UX 27 IRIX 19 FreeBSD 12 7 15 8 5 17 9 2% AIX 5 3 3 Linux 348 400 516 8% Apple
thesis
CORBA TMN Surveillance System DPNM Lab, GSIT, POSTECH Email: mnd@postech.ac.kr Contents Motivation & Goal Related Work CORBA TMN Surveillance System Implementation Conclusion & Future Work 2 Motivation
The Self-Managing Database : Automatic Health Monitoring and Alerting
The Self-Managing Database : Automatic Health Monitoring and Alerting Agenda Oracle 10g Enterpirse Manager Oracle 10g 3 rd Party PL/SQL API Summary (Self-Managing Database) ? 6% 6% 12% 55% 6% Source: IOUG
2005 2004 2003 2002 2001 2000 Security Surveillance Ubiquitous Infra Internet Infra Telematics Security Surveillance Telematics Internet Infra Solutions Camera Site (NETWORK) Monitoring & Control
6강.hwp
----------------6강 정보통신과 인터넷(1)------------- **주요 키워드 ** (1) 인터넷 서비스 (2) 도메인네임, IP 주소 (3) 인터넷 익스플로러 (4) 정보검색 (5) 인터넷 용어 (1) 인터넷 서비스******************************* [08/4][08/2] 1. 다음 중 인터넷 서비스에 대한 설명으로
SRC PLUS 제어기 MANUAL
,,,, DE FIN E I N T R E A L L O C E N D SU B E N D S U B M O TIO
*
Korea Internet & Security Agency 29 12 CONTENTS 1 3 4 5 6 6 7 9 1 13 14 16 18 23 56 59 61 Windows XP SP1 Windows 2 SP4 1 2912 Bot 326 49 2.3 73 73 239 215 11.2% 256 199 28.6% 25 115 117.4% Bot 8,469 46
슬라이드 1
[ CRM Fair 2004 ] CRM 1. CRM Trend 2. Customer Single View 3. Marketing Automation 4. ROI Management 5. Conclusion 1. CRM Trend 1. CRM Trend Operational CRM Analytical CRM Sales Mgt. &Prcs. Legacy System
User's Guide Manual
1. 롯데 통합구매 시스템 사용자 매뉴얼 (공급사용) 2006.01-1 - 문서 이력(Revision History) Date Version Description Author(s) 2006/01 V1.0 사용자 매뉴얼 - 공급사용 롯데CFD 주) 이 사용자 안내서의 내용과 롯데 통합구매 시스템은 저작권법과 컴퓨터 프로그램 보호법으로 보호 받고 있으며, 롯데CFD의
Citrix Workload Balancing 2.1 설치 가이드
Citrix Workload Balancing 2.1 설치 가이드 2011-7 펴냄 버전 1.0 Citrix Workload Balancing 2.1 설치 가이드 Copyright 2011 Citrix 판권 소유. 버전: Workload Balancing 2.1 Citrix, Inc. 851 West Cypress Creek Road Fort Lauderdale,
歯홍원기.PDF
WWW (World-Wide Web), 1, 1969 ARPANET[1], MRTG[2], Etherfind[3],, WWW TCPdump[4], WebTrafMon[5] (World-Wide Web) WWW MIB SNMP agent SNMP manager,, SNMP agent SNMP manager , NT manager, [8], WebTrafMon[5]
DocsPin_Korean.pages
Unity Localize Script Service, Page 1 Unity Localize Script Service Introduction Application Game. Unity. Google Drive Unity.. Application Game. -? ( ) -? -?.. 준비사항 Google Drive. Google Drive.,.. - Google
Voice Portal using Oracle 9i AS Wireless
Voice Portal Platform using Oracle9iAS Wireless 20020829 Oracle Technology Day 1 Contents Introduction Voice Portal Voice Web Voice XML Voice Portal Platform using Oracle9iAS Wireless Voice Portal Video
ÀÎÅÍ³Ý ÁøÈï¿ø 5¿ù
21 5 Korea Internet & Security Agency CONTENTS 2 3 3 3 4 4 5 6 6 7 7 8 11 12 14 14 15 15 16 18 2 22 23 24 24 32 35 36 2 215 Bot 1,7511,315 33.2% 1,621,468 27.7% 285 431 33.9% 295 12 6.9% 44 396 2.% 132
안전을 위한 주의사항 제품을 올바르게 사용하여 위험이나 재산상의 피해를 미리 막기 위한 내용이므로 반드시 지켜 주시기 바랍니다. 2 경고 설치 관련 지시사항을 위반했을 때 심각한 상해가 발생하거나 사망에 이를 가능성이 있는 경우 설치하기 전에 반드시 본 기기의 전원을
Digital Video Recorder 간편설명서 XD3316 안전을 위한 주의사항 제품을 올바르게 사용하여 위험이나 재산상의 피해를 미리 막기 위한 내용이므로 반드시 지켜 주시기 바랍니다. 2 경고 설치 관련 지시사항을 위반했을 때 심각한 상해가 발생하거나 사망에 이를 가능성이 있는 경우 설치하기 전에 반드시 본 기기의 전원을 차단하고, 전원 플러그를 동시에
SK IoT IoT SK IoT onem2m OIC IoT onem2m LG IoT SK IoT KAIST NCSoft Yo Studio tidev kr 5 SK IoT DMB SK IoT A M LG SDS 6 OS API 7 ios API API BaaS Backend as a Service IoT IoT ThingPlug SK IoT SK M2M M2M
DE1-SoC Board
실습 1 개발환경 DE1-SoC Board Design Tools - Installation Download & Install Quartus Prime Lite Edition http://www.altera.com/ Quartus Prime (includes Nios II EDS) Nios II Embedded Design Suite (EDS) is automatically
다음 사항을 꼭 확인하세요! 도움말 안내 - 본 도움말에는 iodd2511 조작방법 및 활용법이 적혀 있습니다. - 본 제품 사용 전에 안전을 위한 주의사항 을 반드시 숙지하십시오. - 문제가 발생하면 문제해결 을 참조하십시오. 중요한 Data 는 항상 백업 하십시오.
메 뉴 다음 사항을 꼭 확인하세요! --------------------------------- 2p 안전을 위한 주의 사항 --------------------------------- 3p 구성품 --------------------------------- 4p 각 부분의 명칭 --------------------------------- 5p 제품의 규격
Solaris System Administration
Dynamips 를이용한 Cisco Router 와 Switch 가상화 1. Dynamips 소개 2. Dynamips win32용설치 3. Dynamips에서지원하는장비 4. Dynamips에서지워하는모듈 5. NET file 구조 6. Dynamips를이용한 LAB 구축 7. IPv6 address 구조 8. IPv6 RIP Router 구성하기 Dynamips