Network Security

Hi!,I want to configure my sensor such that it sends a reset packet if it detect a file "VirtualR3D.exe".I created a custome signature with STRING.TCP, but it does not work. Engine: String.TCPService Port: 139,445Regex String : [V][i][r][t][u][a][l][...

Hi,Can i permit few IP addresses from any subnet to access Internet for example. In other words if i have the following subnet 10.10.10.0/24 and i need to permit hosts at the ACL from 200 to 254 to access the internet only. If yes how?Thanks in advan...

Hello everyone,What is the best way to setup the PIX 515E for FO? I read that serial + ethernet is the best way to go, this seems to be what I want to do.How do I go about setting this up in this manner? Thanks for your help. I get bad search resu...

CSA did not prevent a machine from sending SMTP traffic to thousands of internal machines despite the fact that the user terminated the action.Does "concurrent query limit exceeded" means that CSA was overwhelmed and just could not handle the volume?...

I have just noticed that this signature has fired for 2 of our different clients but with the same source/ destination IP's. I would normally assume that this is either impossible or very strange. I think that might be where the name of the signature...

Hi,I have an ASA 5520 as the gateway firewall with the public address of xxx.xxx.xxx.060. I do a static NAT to a GroupWise mail server with the public address of xxx.xxx.xxx.050Using the following statement: static (DIA_INSIDE,DIA_OUTSIDE) Groupwis...

hi all, ive a CSC module attached to my ASA 5510 and if i see the service policy there is a Global policy which is default i believe, and i tried configuring SMTP for antispam service i tried adding a diff service policy for diverting the traffic thr...

Can someone explain to me what's happening here? When I set up a static nat on my machine on the firewall I'm not able to get out to the internet, if I remove that nat and go over the global pat then everything works fine:static (inside,outside) 172...

Hi,I am trying to access a Citrix Web Interface server connected to the DMZ interface on my ASA 5510.The only way I can get it to work is by setting up a static NAT for the Web Server. I don't want to have to do this. I want to be able to access it...

Can someone help me please? I know nothing about firewalls and I need to copy a config froma loan fierwall I have; over to my repaired unit.I've used Telnet to get into the loan machine, and I've copied the full config into a Notepad document. I've...

I have this scenario with a PIX 525 6.3, this supposedly worked at one time:I have a device on the inside network that needs to access a remote site network through a VPN tunnel.Inside network device is 10.11.150.1, needs to access remote device 10.7...

I have a client that has no information on there pix 501, mostly what I want to get is the software VER that they have on for the password recovery, how can you go about doing that? or will the file tell you have the wrong software ver when you try t...

As a PIX 7.2(2) Cisco Command Line Configuration Guide document,ESMTP inspection detects attacks, including spam, phising, malformed message attacks, bufferoverflow/underflow attacks. It also provides support for application security and protocol co...

We are observing the following two issues with our ASA 5540 firewall. Clear xlate local is not evacuating the connection established with that local ip. Translation is clearing but it is not able to track the corresponding connections and clear the s...