Network Security

IDS 4240 configuration and tuning steps

Dear all,I need your help on this project We have the pix firewall in redundant configuration with 4 interfaces (inside, dmz1, dmz2, dmz3). Inside interface connected to the redundant core switches 4507R. Dmz1 is connected to the edge switch 2970 wh...

CSA Crashing IE

We are currently using Windows XP SP2 machines with Microsoft Virtual PC installed and CSA running. When CSA is installed, IE will repeatedly crash at random intervals. When CSI is not installed, the crashing stops. There is nothing in the CSA log...

Unable to route SNA traffic through PIX

Hi. I am helping out someone with network consultancy. We have come across a scenario where the PIX outside, Inside and DMZ interfaces are all connected on one common 3512 Layer 2 switch which has only the default vlan. Strange! but when invistigated...

Filtering verbose alerts

Greetings all. I'm having some difficulties implementing event filters for a 4215 running 5.0.4.1. I've globally enabled verbose alerting via the CLI by doing# service event-action-rules rules0# overrides produce-verbose-alert2. I want to filter 'TCP...

IDS Device Manager not working

IDSM2 when on version 4.1.4S48 was working properly. The IDS device manager at address https://<ip address> was working.After upgrading to 4.1.5S189, it broke the IDS Device Manager. I cannot access the device manager using IE. It says page not found...

ASA5510/SSM-10 IPS events to Syslog?

Hello all,I'm a Cisco/IOS beginner. I've managed to configure my ASA5510 to do it's thing for the most part. The ASA5510 will write it's IDS events to my syslog server, butI can't seem to find a way to get the SSM-10 Module to do the same. I can l...

PIX 501>>> Linksys Problem

Hi All,I have a PIX 501 firewall, which is connected to a Linksys WAG54G (as my ADSL modem)I have been using the PIX before I moved location, and I want to keep it exactly the same, just with a new public IP Address. I have changed the configuration ...

Upgrading to version 5 from 4.1-5

I am trying to upgrade our version 4.1-5-S190 sensor to version 5. I am trying to do this through VMS 2.3 and am receiving error message Sensor X: Signature Update ProcessThe update of the sensor X failed during the update script process, msg=An er...

ids to ips license

Dear All,i upgraded my nids 4235 to ips 5.0(1)s49 , but when i logged into the nids it saysThere is no license key installed on the system.Please go to http://www.cisco.com/go/licenseto obtain a new license or install a license.are they charge for th...

Resolved! Changing listening port for SSH on IDS

What command would I use to change the listening port on a 4200 series IDS? I have it listening on another port, and when I applied the S189/S190 update, it changed SSH back to port 22.Just out of curiosity too, does anyone know what else the S189/S...

Possible to construct an alarm to look for oversized DNS?

Let me begin by stating that I am running Cisco IDS Version 4.1(5)S190 on an IDS-4235 sensor...I have a requirement to identify any UDP port 53 traffic emanating from my network where the overall UDP packet size exceeds 1024 bytes.I’ve tried to use t...

Where to buy or rent IDS appliance for CCSP?

Hi All, I am currently studying for the CCSP, I have taken 3/5 exams and have CSIDS and SAFE to complete. I am working on the CSIDS and would like to be able to work with the command line. I would like to purchase or rent a unit for little money (if ...

PIX 501 access Internet via PPTP

Hi,I am new to cisco PIX 501.I want the PIX (version 6.3.5)to access the Internet.My WLAN ISP Provider has a router installed at my home. To access the internet I need a VPN-Connection(PPTP, MSCHAPv2, MPPE, 128 bit). So I want to configure the PIX to...

VPN Client - Assigned wrong netmask?

I am having problems with a VPN setup that has previously been working. The VPN Client connects OK (V4.6.04.0043) however, if I check the IP address & mask assigned by the router I see :-IP Address : 172.22.80.126Subnet Mask : 255.255.0.0Gatew...

Signature updation failed

Hello Firends,Iam network engineer works on IDS sensors. i have NIDS ver 4235 but the thing is it is giving error " connect failed" whenever i try to upgrade its signature through my ftp server. Plz i need ur help me in this regardwith Thanks & Regar...

Network Security

Forum Posts

IDS 4240 configuration and tuning steps

CSA Crashing IE

Unable to route SNA traffic through PIX

Filtering verbose alerts

IDS Device Manager not working

ASA5510/SSM-10 IPS events to Syslog?

PIX 501>>> Linksys Problem

Upgrading to version 5 from 4.1-5

ids to ips license

Resolved! Changing listening port for SSH on IDS

Possible to construct an alarm to look for oversized DNS?

Where to buy or rent IDS appliance for CCSP?

PIX 501 access Internet via PPTP

VPN Client - Assigned wrong netmask?

Signature updation failed

Hearty congratulations to the December Spotlight Award winners!

Renew.cisco.com just got refreshed, and it will make your life easier!

Announcing Resources That Guide You to Success

Firepower 7.2.1 - Issue with the FlexConfig Text object override

Private VLAN's interaction with ESXi and firewall

Packets appearing in ASP DROP?

What is PID when we try to integrate with Cisco API's

Broadworks Product ID

FMC API - can not associate a prefilter policy to an access policy

What is the result of placing, on ASA outside int, ACL...

On ASA5525 with vanilla setup, need to place ACL on outside int?

CSR 1000v ACL syntax-- use wildcards or masks?

SFR sensor upgrade fails readiness check