Network Security

We have a Pix 515e unlimited firewall. we installed 128MB of RAM in the firewall and upgraded the firewall from software version 6.3 to version 7.2.1. Installed the ASDM on the Pix. Upgrade went as planned. No problems on boot. Since then the fire...

I recently upgraded my PIX 515 from 6.35 to 7.12. Before the upgrade I was able to remote desktop into my servers from home. After the upgrade when I try to connect it appears to be trying to connect. However, I get a message stating the network is b...

I setup ID 3110 (suspicious mail attachment)to deny attacker inline thinking that nobody needs to send those type of attachments and it would cut down on virus's. Worked fine until today when someone internal tried to send one and the IPS blocked my ...

I'm trying in vain to upload access-list changes I've made to a startup-config file for a PIX 515 (version 6.3(4).I can't use the copy command at all. When I add a tftp-server line and try "write net startup-config" doesn't work. I go into "config te...

HiJust bought 2 PIX 515E(PIX-515E-UR-BUN) and are about to setup the box. This came out harder then expected :/After connecting my computer to the box, I am unable to aquire ip address, and the manual said there is a built in dhcp server at 192.168.1...

Recently we noticed that the HTTP POST request containing SOAP application is not passed through the PIX (7.1(2)) with default inspection rule.The message is:--------------------------------------------Hypertext Transfer Protocol POST /rcu/rc.asmx...

Here's a question about the mechanics of how the PIX handles ARP (I think!)Assume, just for example, I had a 'standard' PIX installation. 2 interfaces, inside and outside, on standard security levels. I've a number of external IP addresses I can use ...

I had a question regarding securing our webservers that use IIS. We have 2 options in play. Which one is a better solution to secure IIS from the IIS vulnerabilities and etc...? I know both have advantages and disadvantages.Here's the setup, a Cis...

Just starting out trying to tune some signatures to fit our environment, and looking for clarification on some parameters of IDS signatures.For example: 2152 - ICMP floodIt uses the "Flood Host" engine with the action parameters:Limit type: percent...

Hi everyone, I have the following case:2 x Cat6509 (HSRP master and slave)2 x IDSM blades (v5.0 - 229)each Cat has his own IDSM blade install online (not inline), with 2 monitoring sessions on each Cat.There is any way to monitor traffic over 600 Mbp...