Re: Cisco IOS Shellcode - McAfee IPS Protection

[Darren Reed <avalon () caligula anu edu au>]

In some mail from planz 235, sie said:
> Hi,
>
> McAfee claims to have "Zero-day" protection against the recent
> vulnerability disclosed against Cisco particularly on Shellcodes.
> Their press release says, McAfee IntruShield's existing infrastructure
> protection proactively covers new exploit techniques against Cisco
> IOS, such as those demonstrated at last week's Black Hat conference.

And can someone tell me what value this is or is the compromise of
border routers not important ?

I'm just puzzled at how you get McAfree's product between your Cisco
router, that gets frame/dsl/isdn/whatever from your telco, and the
wallpoint where the attacks are going to come in from.

Admitedly they can protect you internally and against attacks launched
across your LAN, but how does that help an ISPs core routers that have
dozens of inbound lines that aren't ethernet ?

Darren