Network Security

I installed an agent kit to my laptop to test a group setup and now when i try to uninstall it from my pc a message pops up saying that the csa service can not be stopped. I tried to find my host in the CSA MC but i could not. Has anyone ran across...

I am looking for an explanation of the changes made to the sig 1330 with release 248. Many of the Normalizer subsigs did not produce alerts before. Now they do and my sensors are firing a ton of 1330 events. Any Cisco Signature Engineers able to resp...

Hello I need to give access to all my users to a external ldap server to query email addresses, what is the command that I need to run?my internal subnet is 10.1.0.xthanks for your replies

I have an IDS "listening in" on two switches. Problems begin when a host connected to switch1 talks to another host connected to switch2. Apparently I can see the packets twice (the only difference is TTL decreased by one). To make it more interestin...

1.I was wondering if any one has run this in a production environment yet and what if any issues have you had.2.What models did you run this on the example config indicates this will function on 500 through 5500 series devices. So will this work on a...

Have a ASA 5510 with Content/URL filtering. I am looking to utilize this with a remote PIX which currently uses the content filtering of Websense. Can I point the PIX 501 (remote) at the ASA (Main) to provide for content filtering at the remote sit...

With the ASA firewalls work as failover group,how can i config the IPS module of them work as failover too?When ASA firewall works,i just need config primary one,then,how to deal with IPS mudules of ASA firewall?

I have been tring to work with a few TAC guys on getting an Out of Band, Virtual Gateway configuration implemeneted, but for various reasons, we seem to be missing each other. I belive I have everything configured properly, however, I am unable to g...

We have IDS Module in 6500 Switch .We are facing strange for IDSM,when we telne to IDSM we get banner only but we can not able to enter any command on it.We cant able to take web access for same.Is anyone facing same problem ?Can anyone help to solve...

tengo un pix 515e, un servidor que esta en la dmz no puede tener conexiones hacia internet por conexion segura que es por https o puerto 443, ya le asigne el nat statico y supuestamente si debe de hacer conexiones sin problema, pero, solo por http si...

I have attached topology . I am installing new firewall , and I am having vpn tunnels coming over to 2621 routers . I want to move away couple of tunnels to firewall.But i dont want to nat tunnel traffic , also I want to configure firewall such as tu...

After my IDSM-2 crashed, I got a dump and noticed the following error:13Sep2006 15:35:11.250 2.010 sensorApp[13544] sensorApp/W errWarning Producer appears to be out of superblocks...consider configuring TCPReassemblyMode to loose FreeBlocks: 9Can an...

i have an interface on one of my dmz interfaces with ip address 172.27.127.1/24 to a LAN with networks 172.27.127.0/24 and 172.27.124.0/24...how do i reach the 172.27.124 network through this interface through the PIX dmz int ,can it accept a seconda...

Can anybody help, I can't get my sniffing interface to work. I can manually set it by doing the ifconfig xxx up, but it won't remain and does not seem the to be the right solution. I have the following error below, any help is appreciated.Modify syst...

I have a Cisco 4215 IDS sensor running 5.1-3 I am trying monitor events using Ciscoworks VPN/Security Monitoring Solution but I get a connection status of indeterminate under the Monitoring Center, Security Monitor, Monitor, Connections. I have 29 ...