Network Security

Are there any SNMP OIDs for monitoring dynamic DMVPN NHRP entries? I'd like to poll my hub router for a list of active DMVPN spokes, and NHRP seems like the best thing to check, but I can't find any MIBs for NHRP outside of the Frame Relay context.Th...

I know this can be a really complex topic, but in general, how does a user actually consume a license on a PIX? And, if I have a 10-user license, and they are all consumed, what happens when user 11 tries to make a connection?Thanks much!dave

Hi brothers,I've got a pix505E running in company. After 4 months, it suddenly hangs up every few days. During this period, all connections wouldn't be lost but clients could not establish any new connection to internet. For example, when i was downl...

Please help. I have used VPN wizard to configure PIX 501. When testing with 3.6 client I have no traffic between client and internal network. Looks like I have tunnel open and client have address assigned from the internal pool. Configuration and Deb...

Dear All, I Miss one or more signature updates when i'll update the signature, is it ok to skip the older one and directly update the newest, for example i miss 3 signature updates: s233,s234, s235, is it ok to update s235 directly or it have to upda...

I have a 3015 with two remotely connected PIX 501 VPNs. I am having difficutly getting the configuration to allow me to send traffic from one remote network to the other via the VPNs.Is this actually possible? If so, what is the method for configurat...

When deploying packages to my sensors I am receing the error:"Error while pushing files to the sensor java.lang.Exception: An exception occurred during deploy, file=analysisEngine,detail=Validation Error: Not enough keys in key string.: Sensor file a...

Has anyone else recently been getting Alerts on the below signatures while accessing Cisco sites?Windows Shell External HandlerApache mod_proxy Buffer Overflow3340:03883:0The above two alerts listed ftp-sj.cisco.com as the attacker and my CS-Manager ...

If I want to match a string for the following, what should my regex value be? Would it accept a space?user 1 1-or-get setup_I'm trying to find documentation that tells me how to use a space in the regex.Thanks in advance

Is it possible to manually deny (not block)an attacker-inline by using the CLI of a sensor?If not, is it possible in MARS

Hi,I have two IDS 1)4250. 2)4235.These both are Integrated in Cisco works Version 2.2.Everything was working fine until last 10 days.But suddenly in VPN/Security management solution > Monitoring center > Security monitor > events, I am not able to vi...

When I try to use the PDM to save my PIX configuration to a TFTP server, I get an access violation. Here's what I specified:I told the PDM to create a file named "pixconfig". The PDM accepted that just fine.when I went to do the actual save, it told ...

Hi,I have the following scenario: Several IDS, VPN concentrator and a couple of firewalls. Everything ok under VMS 2.3 apart from the firewalls ver. 7.1.1, wich apparently are not supported by VMS 2.3Anyone with this experience? Any way to resolve th...

I am thinking about updating our PIX 515 to a new ASA5510. We have two pix (failover pair) for our internet connection and two PIX (failover pair) for our extranet.Take a look the attachment. Could I use another interface on the ASA to terminate the ...