Network Security

Hi,We are having cisco IPS 4255 with IPS version 5.1.1 and latest signature. We are connected IPS is in promiscuous mode and we are seeing all the signature are false in security monitor 2.2. Please help me to overcome from this problem.Regards,Ram

We've successfully VPN into the other domain but we're unable to access the devices in that domain. What could be wrong?

About a week back I used the erase command but actually (I think) erased my .bin image file from one of my ASA 5520s (We were in Active/Active configuration during testing, but decided to go with Active/Passive) so I attempted to erase the configurat...

CiscoWorks ipsmc 2.2 adds a space between the ports when you update the variables for web-ports. ie 80-80,8010-8010 is changed to 80-80,space8010-8010. I think that this is an error. If you change the port list to include a new port, when you deploy ...

Has anyone seen this? Since upgrading to IPS Event Viewer v5.1 my export files no longer have a "date & time" column like they did in the older v4.1 Event Viewer. Because of this, I cannot export the IPS data to create reports (not time and date, j...

For v4.x sensors, support for Attacker/Victim Loc is defined through setting address ranges in IPS MC > Conf > Settings > Internal Networks (IDS 4.x)After upgrading a 4.x sensor to 5.x, the internal networks (stored in $IN) now show up in Event Varib...

let's say I have signature with the following characteristics:Event Counter-------------Event Count: 1Event Count Key: Attacker and Victim addressesSpecifiy Alert Interval: NoAlert Frequency---------------Summary Mode: Fire OnceSummary Key: attacker ...

This signature FPs on a particular client POST, see attached text for examples.

Hi. I am replacing a pix with a pair of ASA 5520's. I have the new config into one of the 5520's and it seems to be working just fine.Now i need to put the second one into the mess by having it active/active Failover. Does anyone have a sample config...

We've got an ASA5510 that is blocking outbound mails for certain domains (for other domains there's no problem, there are no issues with any inbound mails as well). The mail server keeps logging this "The DNS server encountered an invalid domain name...

Hi Everyone,I have my ASA5520 setup with radius auth on webvpn and everything is working great, even group assignment with the radius class OU=group1; etc...I need to go a step further with this. I want users to not have to reenter the same userid an...