Trellix IPS supports VLAN based reconnaissance attack detection. By default, this option is disabled. When this option is enabled, the reconnaissance attack detection is done on both VLAN and VIDS.
Trellix recommends that you enable this option only if you want the reconnaissance attack detection to be done on a VLAN basis.
Syntax:
set vlanbasedrecon <enable|disable>
Parameter | Description |
|---|---|
enable | Enables VLAN based reconnaissance |
disable | Disables VLAN based reconnaissance |
Applicable to:
NS9x00 Sensors