Network Security

We have three IDS/IPS devices that we recently aquired, and are planning to deploy.If I understand correctly, I can manage them directly using the CLI, or using the free single device Cisco IPS Device Manager?If I want centralized management, would I...

I would like to find out if the IPS will send a reset to the attacker when a signature is modified to deny-attacker-service-pair-inline.

I have a PIX 525 with IOS version 5.2 (1) and I would like to upgrade to version 7.2. I also need to upgrade or install the latest PDM manager. Any help or suggestion is appreciated.

Hi All,I am trying to configure the Crypto Map IPSec and ISAKMP on the 1841 just like i did on the Pix 506e creating a VPN tunnel, question is that is it possible or not. i.e on my pix 506e i have it this way, how would i do the same thing on my rout...

Hi all,can advise on whether PIX 525 is able to handle specific routes in its routing table?This is because I have configured two static routes on the PIX:route inside 10.0.0.0 255.0.0.0 192.168.1.2 1route private 10.1.1.0 255.255.255.0 172.16.1.2 1...

HiI have a cisco pix 515E firewall, I'm experiencing a strange problem, and I'd like to get people's ideas as to what it could be and what debugging I can do.Basically the problem is that randomly from two different unrelated servers some SYN packets...

I have a new 4215 that has been in "monitoring" mode for a while. It is monitoring the inside and outside interfaces of my PIX and I am detecting a lot of TCP SYN Host sweep from my proxy server and a bit of limewire. In regards to the TCP SYN Sweep ...

Hi.My client requires SSL VPN to be configured at their site. I had followed the 'SSL VPN Client (SVC) on ASA Using ASDM Configuration Example' from the cisco website. The client has some more requests based on their setup. They require authenticatio...

I am having trouble passing arguments to tcpdump via the packet display command.The tcpdump command I am trying to use is:tcpdump -nvvX host 10.0.0.1It seems I should use:packet display GigabitEthernet0/0 expression -nvvX host 10.0.0.1This doesnt wor...

I received the S253 sig update notification yesterday and for the first time it appears the text indicates that I can upgrade my IDS 4210 to the 5.2 version needed to have continued sig support. What is the upgrade path? What do I need to order? E...

I have a pix 506e that will not boot past the point noted below where I have pasted the console screen output. All testing that I can do up to that point comes out ok. Any help with this problem?CISCO SYSTEMS PIX FIREWALL Emb...

Hi Netpro's,My CiscoWorks application is failing to start. There are 3 services displayed under the Services console:1) CW2000 ANI database engine (Started)2) CW2000 Daemon Manager (Unable to Start)3) CW2000 VisiBroker Smart Agent (Started)Is there a...

Our MARS appliance is running V4.2.1. We have about 40 or 50 IOS switches sending their entries to it. We see interface up and down transitions all the time as expected.It seems that for many of the entries in MARS, the interesting data, such as the ...