Why are some signatures a "component of" some other signature. Does this mean they depend on each other to work properly?Example is Signature 5748/1This is a component of meta signature 5748-0 and has no event actions of its own defined..
Hi,On my Asa(with asdm)i configured the DHCP server in the managment tab to allow dynamic Ip assignment for my lan devices (on the inside interface). I tried to allow Ip assignement via my Lan DHCP server for my VPN SSL client located on a remote sit...
Hi,I'm using "management-access" command on all PIX I manage to get snmp info from ipsec tunnel (management-access inside) => no problemNow I'm new with router conf, and I did not find the same command to do that.So how to access inside interface fro...
Please do somebody know - if I adjust in policy map on ASA two classes - first for specific ip addressess (for which I dont want H323 inspection) and second global-all addresses all inspections. It means that packets from first rule will also conform...
HiIs it possible that in the CLI to find out in what object-group(s) that a specific IP is located?I'm currently just dumping the configuration and using wordpad to search it through. It sucks but its the easiest way, for me atlest. It might be easy ...
I am trying to set up a webvpn solution where the Citrix ICA Java plugin gives Citrix access to users.When I log in to the SSL VPN portal and click the link that contains ica://ipofserver/?DesiredColor=4&DesiredHRes=1024&DesiredVRes=768 the Citrix Ja...
How can I block Lime wire on my router 2800 I tried build in feature through SDM but limewire still works. I even tried to block port 6346-47. no luck,,,,,,,Please help.
Hi allI'm trying to design a data center security solution. I have a 6509 E with sup 720 and FWSM. My concern now is whether to go for IDSM or a 4200 sensor. I know about the through put limitations of both products. Can you all highlight any other p...
Today, ips-4250-sx (not-in-line) upgraded from v6.0(4)E1 to 6.0(5)E2. (S335) to (S339)1st appearance & flood of red alerts,all internal sources and destinations:1) Windows DCOM Overflow 0&1 subsigs: (1100src/100dst=86k total hits)2) Netware LSASS CIF...
When shunning, how is the interface decided?show shunshun (outside) 1.1.1.1 0.0.0.0 0 0 0shun (inside) 2.2.2.2 0.0.0.0 0 0 0I believe both IP addresses should be shunned on the outside interface.
Has anyone else been running a 4270 sensor in production with traffic at 1Gb/s or more?I'm interested in discovering if the symptoms we're seeing are unique with the default signature policy and 6.0(5)E2:Event Store wrapping every 60-90 seconds, maki...
My customer has an evironment with inline CAS for wireless-users and out-of-band CAS for wired users. The Wireless-controllers and Clean-access users authenticate with RADIUS and MSCHAPv2 to a Microsoft IAS 2003-server. When the users passwords expir...
I was successful in configuring my ASA 5510 to allow on incoming queries on port 80 to 204.xxx.xxx.178 to be redirected to port 8123 and go to the internal IP of 192.168.100.178.I set this up on the ASDM under the NAT Rules section. I used the PAT s...
I have a Pix-535. It was running fine for couple of weeks, until I turned it off and on again. After that, the pix run for 5 to 10 minutes and the begin lock out traffics and console. If I did a reboot on it, it doing the same thing.
