When I use internet scanner to feed and then perform a port scan, fusion shows the event as 'no correlation'.
The questions I have are:
1) Does fusion have the ability to correlate TCP/UDP probe/scans (is port open/closed/vuln etc)?
2) Can system scanner feed Fusion suficient data to allow it to correlate to the same level as it would if using internet scanner to feed fusion? (I wouldn't have thought so)
3) Are there fusion correlation advantages to using internet scanner versus system scanner to feed it?
Thanks Steve
_________________________________________________________________ Need more speed? Get Xtra JetStream @ http://xtra.co.nz/jetstream
_______________________________________________ ISSForum mailing list [EMAIL PROTECTED]
TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo/issforum
To contact the ISSForum Moderator, send email to [EMAIL PROTECTED]
The ISSForum mailing list is hosted and managed by Internet Security Systems, 6303 Barfield Road, Atlanta, Georgia, USA 30328.
