Meraki

Community

About mags

Re: Simulate Intrusion Attack

by in Security & SD-WAN
‎Apr 7 2020 8:01 AM
‎Apr 7 2020 8:01 AM
Hi DHAnderson,   I saw the alerts in Security Center this morning when I checked. I tested again and it is now showing as suspicious .pw DNS query. ... View more

Re: Simulate Intrusion Attack

by in Security & SD-WAN
‎Apr 7 2020 7:58 AM
‎Apr 7 2020 7:58 AM
Hi Johnfnadez,   I got the alerts now showing in Security Center. I thought there would be an email alert generated as well but there wasn't any. Thanks!  ... View more

Re: Simulate Intrusion Attack

by in Security & SD-WAN
‎Apr 6 2020 2:28 PM
‎Apr 6 2020 2:28 PM
That's strange and scary. ... View more

Re: Simulate Intrusion Attack

by in Security & SD-WAN
‎Apr 6 2020 2:27 PM
‎Apr 6 2020 2:27 PM
Hi Johnfnadez,   In Security & SD-WAN > Threat Protection, I have IDS/IPS mode intially set to detection and ruleset to connectivity. I changed it to prevention and security with the thought that it will capture the notepad.pw malicious DNS query but no joy. The client I am using for testing is not assigned to any Group Policy so I think default policies will apply.  ... View more

Re: Simulate Intrusion Attack

by in Security & SD-WAN
‎Apr 6 2020 2:19 PM
‎Apr 6 2020 2:19 PM
Hi BlakeRichardson,   That would be the last option I would like to take because it will be a lot more complicated to get third party involved. Thanks for your suggestion.   ... View more

Re: Simulate Intrusion Attack

by in Security & SD-WAN
‎Apr 6 2020 2:16 PM
‎Apr 6 2020 2:16 PM
Thank you Doug100 ... View more

Re: Simulate Intrusion Attack

by in Security & SD-WAN
‎Apr 3 2020 2:13 PM
‎Apr 3 2020 2:13 PM
Hi PhilipDAth,   At the moment, I don't have much time to spare to learn Metasploit but I'll put that in the list of nice things to learn in the future. Thanks! ... View more

Re: Simulate Intrusion Attack

by in Security & SD-WAN
‎Apr 3 2020 2:08 PM
‎Apr 3 2020 2:08 PM
Hi Johnfnadez,   Is it just simply opening notepad.pw in a webrowser? I tried to do it but nothing comes up on the MX email alerting or Security Center.  ... View more

Re: Simulate Intrusion Attack

by in Security & SD-WAN
‎Apr 3 2020 8:18 AM
‎Apr 3 2020 8:18 AM
Me as well, I do not have any experience with Kali Linux. I am thinking maybe a simple free application to install in Windows 10 that can quickly and safely simulate an intrusion attack. I have to do in remotely since I am now working from home due to the pandemic. ... View more

Re: Simulate Intrusion Attack

by in Security & SD-WAN
‎Apr 3 2020 8:07 AM
‎Apr 3 2020 8:07 AM
Yes, I would like to test Snort IDS/IPS module. Thanks! ... View more

Simulate Intrusion Attack

by in Security & SD-WAN
‎Apr 3 2020 8:01 AM
‎Apr 3 2020 8:01 AM
Hello Cisco Meraki Community,   We have a mix of MX67C, MX84 and MX100 deployed at our branch offices with Advance Security license. I wanted to test intrusion prevention by simulating an attack. Can anyone share the tools and applications they used? I would like to test one of the offices and safely simulate an attack. I would like to see how the alert looks like and the behavior of the MX. Any information is appreciated. Thank you. ... View more
© 2024 Cisco Systems, Inc.