Network Security

Hi all,can advise on whether PIX 525 is able to handle specific routes in its routing table?This is because I have configured two static routes on the PIX:route inside 10.0.0.0 255.0.0.0 192.168.1.2 1route private 10.1.1.0 255.255.255.0 172.16.1.2 1...

HiI have a cisco pix 515E firewall, I'm experiencing a strange problem, and I'd like to get people's ideas as to what it could be and what debugging I can do.Basically the problem is that randomly from two different unrelated servers some SYN packets...

I have a new 4215 that has been in "monitoring" mode for a while. It is monitoring the inside and outside interfaces of my PIX and I am detecting a lot of TCP SYN Host sweep from my proxy server and a bit of limewire. In regards to the TCP SYN Sweep ...

Hi.My client requires SSL VPN to be configured at their site. I had followed the 'SSL VPN Client (SVC) on ASA Using ASDM Configuration Example' from the cisco website. The client has some more requests based on their setup. They require authenticatio...

I am having trouble passing arguments to tcpdump via the packet display command.The tcpdump command I am trying to use is:tcpdump -nvvX host 10.0.0.1It seems I should use:packet display GigabitEthernet0/0 expression -nvvX host 10.0.0.1This doesnt wor...

I received the S253 sig update notification yesterday and for the first time it appears the text indicates that I can upgrade my IDS 4210 to the 5.2 version needed to have continued sig support. What is the upgrade path? What do I need to order? E...

I have a pix 506e that will not boot past the point noted below where I have pasted the console screen output. All testing that I can do up to that point comes out ok. Any help with this problem?CISCO SYSTEMS PIX FIREWALL Emb...

Hi Netpro's,My CiscoWorks application is failing to start. There are 3 services displayed under the Services console:1) CW2000 ANI database engine (Started)2) CW2000 Daemon Manager (Unable to Start)3) CW2000 VisiBroker Smart Agent (Started)Is there a...

Our MARS appliance is running V4.2.1. We have about 40 or 50 IOS switches sending their entries to it. We see interface up and down transitions all the time as expected.It seems that for many of the entries in MARS, the interesting data, such as the ...

Just wanted to get an idea of what others thought about signatures that are enabled by default with an action.In our environment we've already seen a few false positives but we have all signatures set for "alert only" for now. We got hit by the ASA ...

Hi guys,Here is the scenario.Pix 525 runnig 6.3(3)When there is a change on the Mac-Address of a host, lets say, I had to change the NIC, PIX maintain the "old" mac on arp table. To resolve the issue it's I must clear the oldmac from arp table, even...

Does any one know if Xbox live will work through a PIX 515? If so, what configuration is required?

I am looking for a realtively simple IDS. Something that monitors and alerts on intrusions. Does anyone have a recommendation for a particlur device. This doesnt have to be high end, price is a major factor.