Network Security

Is there a trick to getting the signature 3050 ?half open syn flood? to produce an alert? The Cisco Intrusion Prevention System is on version 5.1(1p1) S229.0.We have tuned the signature to alert at 2048 half open connections. syn-flood-max-embrionic:...

I am using the new SDM with the IPS dashboard built in, and was wonder where to get the updated signatures that are listed as the top threates.

Hi,I have pix 506e runnig as my Gateway Firewall.Suddenly i am not able to Ping any interface,not able to telnet internal Interface.Internet Browsing also stopped .Can anyone plz tell me the causesa nd remedies for this.I dont have any Syslog Server ...

Hi,Ihaev pix 506e runnig as my Gateway Firewall.Suddenly i am not able to Ping any interface,not able to telnet internal Interface.Internet Browsing also stopped .Can anyone plz tell me the causesa nd remedies for this.I dont have any Syslog Server e...

Is there any provision of FAILover/HA in Cisco IPS 4200 series?

Hi,I have a Hub and Spoke topology, Frame Relay is the WAN connection.I'm planning to use EIGRP as Routing Protocol, but i'm stuck at the Firewall.I was looking for a way to configure the Firewall for EIGRP, which is think it supports just OSPF.My se...

I want to set up a mchine behind the firewall to be able to ping a outsdie computer. I looked at the cisco documentation, Handling ICMP Pings with the Pix Firewall. I configure every rule accordingly, and is not working.The icmp packet is going out, ...

Hi All,I have a strange one here. One of my location's PIX firewall is setup to be a DHCP server for LAN clients. However, the PIX gives out its inside interface IP address to cleints requesting an IP address. What happens is there are 2 nodes with t...

Hello,I am about to set up 2 ASA 5520s in an Active/Passive configuration. I have read online that the managment port can be used for the failover interface but also that it operates at 100Mb instead of 1Gb... I figure that the 100Mb should be more t...

Hi,how can i let the ping pass through the PIX from inside (eht1) to outside (eth0) to test connectivity??i'm using PIX7.0(4) cheers

We saw a couple of these yesterday. What concerns me is that the trigger packet does not contain a string that matches the regex. I have 2 questions:1) What is the point of putting brackets around the colon at the end of the regex? This is done in ot...

Hi All,I have upgraded our PIX from 6.3 to 7.1. But the PIX has stopped accounting VPN traffic.The command "accounting-server-group" is issued in the tunnel-group.In 6.3, I used the command below to enable accounting of VPN traffic. But this command ...

all clients asking for an IP address (via dhcp) get an address starting at 129.168.0.128 and up. i havent made any such configuration on the pix though. the DHCP pool we made is IPs in the range 192.168.1.50-100 (and 192.168.1.150-170 for VPN users)....