Network Security

I have done a previous search and realize that there is no good way to convert Snort signatures to Cisco IDS/IPS custom signatures. I was wondering if anyone has ever converted the Snort "state-based" TCP string matched signature into something that...

Hi Team,I have a Cisco IDS 4235 device with license "<LicFileID>20040416051341665".Software Version is 4.1(5)S227 (IDS-sig-4.1-5-S227.rpm.pkg)I know that signature update is not possible for 4.x and thats the reason why Im going for 5.x & then to 6.x...

Is there a way to continuosly monitor the external interface traffic usage and save the results to a syslog server, in order to be able to assess bandwidth usage?

i have a pix 506e in front of my network i have several servers in my network, but there are 6 servers that i am concerned about.is it possable in the pix to put those 6 internal ips in a group and have that group use nating through 1 IP address?

Which Cisco firewall can be pitched against Fortinet UTM box??

Where do you pull statistics on the ASA to determine my current teraffic patterns to a DMZ server so I can estimate reasonable values for connection limits?

there a doc in cisco which speaks of configuration of backup links.question;sla monitor 123 type echo protocol ipIcmpEcho "IP address" interface outside num-packets 3 frequency 10 The ip address can be any ipaddres on the internet ?What happens if i ...

I have a remote site that I need to block some outbound Internet traffic. The site is setup as a PPPOE for Internet access via a DSL modem and they have a T1 connection to the corporate office. I have an ACL setup to take care of Inbound Internet t...

i have a IPS 4260, running Version 6.0(5)E2.I have noticed different duplex on the interface.My understanding based on the logs below:The interface below seems to be running in half duplex, but they are configured for full duplex.-GigabitEthernet2/0-...

Hi,I've Cisco Security Manager Suite with IPS Manager.I want to add a sensor...I go to Devices->Sensor as suggested by User Guide.But when I open the page i don't have the Add function, but only Re-Import and Reboot...Why?I've not powered on the sens...

Dear All,When i am trying to access one server which is above my ASA i am getting the following error.=======================Dropping TCP packet from Outside:10.20.8.52/30000 to Inside:10.20.0.243/34538, reason: MSS exceeded, MSS 1380, data 1436=====...

Hi All, I have two ASA as active/standby failover. these two are connected to 3750 switch through trunk port that carry vlan 10,20 and 30. I want to deploy IPS in between with inline mode. I am little confuse how to connect IPS here. should it be con...