Network Security

ASA blocking IM using http?

I'm confused. The cisco ASA book I have states to block Instant Messaging use a http-map. Most IM aren't using http or port 80 correct? I tried the commands http-map Filter_http port-misuse im action dropIM still works? Any ideas? I may just use an A...

IDSM 5.1(1) S222 certificate unknown errors

Hi,I reimaged my IDSM2 sensor in the following sequence:1. Installed WS-SVC-IDSM2-K9-sys-1.1-a-5.1-1.bin.gz2. Installed IPS-sig-S222-minreq-5.0-5.pkgI am able to launch IDM and work with it. But, I get the following errors when I type "show events" o...

IPS 4240 Signature Update

Dear All,Please anyone can say the latest signature update available to update to IPSThanksswamy

New to ASA 5510

Hi thereI'm new to Cisco and our ASA 5510. I'm not new to firewalls in general but this is my first time working with a Cisco product.I have configured my ASA with all my network info but it is not allowing any computers connected to my network to a...

PIX 7.0 and directed broadcast

Is anybody know how to enable directed broadcastin PIX version 7.0?

Resolved! Analysis Engine not running often 5.0(5) Sig 218

Hi We have 27 4215's running 5.0(5) sig 218 and are finding via "health and Welfare messages" that the analysis engine is not running on some of our sensors. I cannot pin down a pattern and it is random. Each time we see this we restart the CIDS daem...

Resolved! How can ASA route packets that come in and out on the same interface?

Hi all,How can I configure the ASA5520 to route packets that come in and out on the same interface? I’ve more than 1 network behind the ASA appliance. It’s separated by internal router. They can’t communicate for each other.I’ve seen this is problem ...

pptp & windows XP connects but cannot see pix side

Hi have a small issue with my pptp vpn connection. I followed the instructions as seen on http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a0080143a5d.shtmlthe problem I have is that after the PPTP connects to...

Resolved! PIX 515E and telneting to port 25

When I telnet (in or out) to a mailserver (using port 25) the response is:220-*******************and all commands come back as "Invalid Command"When I put the old (non-pix) firewall back in, this doesn't happen (the responses are complete and command...

Problem with Microsoft FTP Server through PIX 515E

Hi,Sorry for my very bad english. ¿Can you speak spanish?Cisco PIX 515E 6.3 and PDM 3.0I publish a Microsoft FTP Server through Cisco PIX 515E with static PAT.In active (port) mode works fine, because in passive mode any command receive response and ...

ASA 7.1 uauth caching

Hi. I'm having a problem with the way I've set up http authentication for my users going out to the internet. My goal is to for the users' authentication credentials to remain active while their browers are open, but expire when they close their web ...

PIX 7.0 upgrade

Hi,i have a firewall PIX 515 with PPTP VPN's and IPSEC VPN. When i upgrade to IOS 7.0 i'lll lost my PPTP connections, correct?And what about PDM versus ASDM?Hope to get some help.RegardsSérgio Sousa

Upgrading an IDSM 2 from 4.1 to current 5.1

Hello,I've been trying to do some research on upgrading my software on our IDSM 2 module to the latest version 5.1 Here is what I understand that I need to do:1. Install the 5.0(1) major upgrade, 2. Install the S207 or later signature update*, 3. In...

IE Action Handler Overflow

Has anyone else been seeing large occurences of this signature from what appears to be normal web application/browsing activity? No further tuning of the sig has been performed.