Network Security

I am trying to find out if someone familiar with Cisco's IDS/IPS (network and/or host-based) solutions can tell me if the product(s) can identify and/or prevent ARP poison routing attacks. If so, does it require customizing signatures or is there ou...

I just installed version 8.0(3) on an ASA 5510 so that I could get support for dcerpc application inspection. I added the following to the configuration (10.2.x.x on outside and 10.1.x.x on inside):access-list OUTSIDE-IN permit tcp host 10.2.1.1 hos...

"An unauthorized Network Component, 'ArpCollectorDriver' was detected registering with the system. The operation was allowed."Please find the above event that we are getting this logs often in CSA. Please let me know if it a valid driver or it is val...

i need to rename an interface for one of my DMZ's, if i just use the nameif command with the new name, will that change the name for the access-group and the routes.

HiIs it possible to configure AAA with Cisco IPS and CSACS?thanks

I have a Pix 506 that I don't seem to have the correct "Enable" password for. Is there any way to figure out what the password is or reset it to a default?This Pix is not located on-site. I have no physical access to it so I can't console in. I can S...

Hi, in the cisco IPS there is only 2 signatures that detect SQL in http request, checking a certain select ... from statement, but there are a lot more SQL injection technigues using the Drop or the insert, checking also the (') ... why is there not ...

I have an application that uses an ODBC driver called acuXDBC. The ODBC uses port 20222 to communicate to the server. This connection works perfectly fine internally on our local LAN. However, I just installed a machine at one of our remote locations...

I have recently inherited a network with around 80 hosts containing mostly web, mail, and database servers. After auditing their ASA 5510, I found a major security issue I want to fix with as little service interruption as possible. The problem is ...

Hey everybody,I got an ASA 5505 for a client, and defined outgoing rules ahead of time so that only http/https and smtp/pop3 access were allowed out to certain servers. The install went smooth (I just followed the wizard), but RIGHT as I was leaving ...

I have a Out of Band NAC deployment in a test sandbox network. I have set up a basic check for Symantec Antivirus 10.0 and current definitions using the Clean Access agent. My switch configuration is correct, authentication works properly and by lo...

Dear all,I dont know anything about QOS i tried reading about it from cisco web site but can get only some detail.I am using DMVPN hub-spoke, i am using ip phone between my branches at hub router and spoke. now i want to prioritize my voice traffic w...

Last night we were testing our 4260 hardware bypass and noticed there was a 30 second to 75 second delay before the NIC's started passing traffic if the power cord was unplugged from the IPS. Is their supposed to be this long of a delay? I was under...

When setting up a CBAC (ip inspect) firewall on an IOS router should the "ip inspect" command be placed on the internal interface and use "ip inspect in" or should I use "ip inspect out" on the public or egress interface? What are the pros and cons...