Network Security

What do the different SubSig IDs mean. Take SisID 5748 for example. There are SubSigs 0 - 3 for this SigID. I have started seeing quite a few of these in my event log. Most look to be SubSig ID 1 or 2 which are marked as informational where as the Su...

I have setup a NAC environment and have been able to authenicate to local defined user (Local Database). I setup a LDAP authenication server and have been able to authencate using the AUTH Test tab. When I attempt from the work station the local user...

Our company having Web Portal Server on DMZ Zone and Oracle Server is in inside zone. We need to configure in such a manner that external user can access the web based application through DMZ zone. For that, we configured ASA and we did static transl...

I have an access list that blocks the first part of a network outbound. This should block networks 1 thru 31. I am trying to replicate this line for an additional network but receive the message ERROR: IP address,mask <172.17.0.0,255.240.0.0> doesn't...

Hey, While working on tunning an IPS 4240 for one of my customers, he told me he'd heard of a Best Practices document on tunning the IPS. More on how to tune the appliance, the document talks about which signatures should be enabled, and the best act...

Hi,A customer has 2 sites connected with IPSEC VPN. The Firewall are PIX 506 (6.3.5) and PIX 515 with v7 OS.More over he has VPN clients that can connect on both sites.The question is, is it possible for a VPN Client that is connected on SITE A, to a...

I want to forward pings on my outside ip address to an internal server. Is this possible?

Hi,I have a problem with a Windows XP station with SP2 in the NAC DOT1X environment. I've already installed the SYMANTEC ADF file in ACS with success.After I've installed the SYMANTEC client v. 10.1.0.394 in the XP station, it don't put any file and ...

Hello all,I was wondering where I could find the PIX 501 documentation for version 6.3(4) of the firmware. I have the 7.0 firmware documentation and a lot of the commands aren't working like they say they do in the documentation.In particular I need...

HiI am using before 4215 IDS in my network.My question is what is basic difference IDS and IPS ?. why I am using IPS in place of IDS , what is the key point and benefit ?.Thanksbiplob

I was wondering if there is a suggestion on the following issue:On a Cisco ASA I have configured third interface (other than inside,outside) to be used for VPN traffic.There is no problem with L2L tunnels since the remote IP is known, so it is easy t...

I am implementing a network with an ASA 5520 and an ISA server. I would like to hear input from people who might have done this before as to what the best setup would be for this? Having two firewalls would enable a layer of protection behind the p...

So I finally got my 506 up and running. I have internet access and inbound requests are being directed to the correct servers (smtp, http etcI have noticed many have ip verify reverse-path enabled. Is this a function one would normally enable as a 'b...