Network Security

I have a couple of IDS sensors feeding events into CS-MARS. I have two options; I could filter them in the IDS sensors, or in CS-MARS.Where is the best place to filter them?

Hi,I had created a signature on my IDS. Even though I have deleted it and it does not appear in the configuration, keeps generating the events in the event viewer.How can I stop this.ThanksSalil

Hi guys, I have been looking all over to find out if I can enable the number of authentication attempts using SSH in PIX. Is there a way on the pix that allowes ip ssh authentication-retries 3 like on the router?Is there any methhod of limiting the n...

First of all, we use the autoupdate functionality to upgrade our sensors. I have a test sensor that was upgraded to IPS-K9-min-5.1-1d (from 5.0.6) some time ago. I'm now trying to upgrade the signatures. It is not updating. Instead it seems it has be...

Hi:I?ve just bought an ASA5510-AIP10-K9(ASA 5510 Appliance with AIP-SSM-10, SW, 3FE, 3DES/AES) to implement perimeter security. I planned to use only 1 DMZ but things have changed, and now I need to implement a second DMZ. The ASA-5510 has 4 ports in...

hi all,I recently deleted one of my nat statements because i needed to change the address the inside was being natted to. well i removed the old and added a new. i see it in the running config. but when i ping from the outside world, the old address ...

Quick silly question. We just purchase an FO cisco pix 515e that we want to deploy, and reading the requirments it says the boxes need to be in synch with software version. Our current firewall is running pix 7.0(5) and the new FO box is runnign pix ...

Hi,you can seen my digram and config attached.When i check the routing table on the PIX, it's not showing any RIP route, it's showing just connected.Can you advice what is the problem???regardsFady

Dear all,I have a 6500 switch with IOS mode "encryption feature set". I would like to ssh from the switch to the pix firewall.What command and the option I can use on the switch?Thanks.C.K.

heloi have a problem and perhaps someone can help mei have a pix 515E win 3 interfaces 2 servers are linked in the DMZ with 10.0.0.2 and 10.0.0.3 the 10.0.0.3 has 192.168.0.3 in the inside via static how can i from 10.0.0.2 access the 192.168.0.3 ser...

Dear all,I have a pix with 5 ethernet interface and the version is 7.0. When I use no security level on the interface, the security level change to 0. Can I configure all the interface with security level 0?If I configure all interface to security le...

Good evening I have a customer which would try IPv6 on his host.His host server is allocated on a DMZ on my Pix 525 rel.7.1(2).Now i must put an ACL that permit IPv6 on his host.How can write an ACL to permit IPv6 traffic from and to this host server...

Calling all signature engineers. Are there any sigs for this vulnerability yet?http://secunia.com/advisories/20686/

I was wondering if anyone has seen this one. We had this problem with Sun's iplanet (SunOne) web servers and switched to apache hoping it would go away. The trouble is, when we have low activity our jboss threads spin out of control. They already set...