Network Security

Hi all,I'm in the process of setting up a mars device and have a query about the way it interprets rules. Basically everything seems to be set up fine and incidents seem to also be working ok, for example I'm getting the usual "inactive reporting dev...

Hi Group,This is sort of urgent for us so pls send in your valued inputs at the earliest.We had two Cisco PIX 520 (REV D0) running in failover mode. We decided to upgrade one of them to the latest software, I think 6.3 or 7 version. The upgrade faile...

HI, I been told that Cisco VNP 3000 allow administrator to assign static IP for each user login in via VPN client software. But does this function available in PIX, ASA or IOS too?

I am curious to know if anyone else had problems after installing Sig226, I have seven ASA SSM modules that crashed within three minues after the upgrade. Four of the sensors had to be reimaged and one of them is still down, I cant get it to take an ...

hello everybody,why can i only monitoring received (rx) traffic on a VLAN ?thanks for an answer...

We have a PIX 515 at a remote office. It is connected to a cable modem. We had a VPN up and running with no problems. The cable company did an upgrade and now the PIX will not get a DHCP address from the cable modem.I have talked to them multiple tim...

HelloAre there documentation to explain how to upgrade pix 7.0 to 7.1 with active/standby configuration.Thanks

I've never used this command before, so I'm not sure if this is an appropriate use...but, I have a 515-e running 7.12 with internal clients trying to hit their old ip scheme of 10.25.x.x (havent' found the source of why/what on the machines are still...

Consider a scenario with redundant pix pair pixA and pixB (say 6.3x code) and internal switches sw1 and sw2. Fa0 of pixA is connected to port 3/1 or sw1 and fa0 of pixB is connected to port 3/1 of sw2. Assuming pixA is the primary and sw1 fails..is t...

Hello experts. I wonder if there is a solution to this problem. I have a single host in a dmz 192.168.9.6/29 with a 515 pix at 192.168.9.1/29, and 172.30.7.250/24 on internal interface. There is also an external I/F but it is irrelevant to the proble...

Hello :Two PIX firewalls both with UR license,then if the two pix can suport A/A mode failover?Thanks!

hi, I run CNR 6.2.2 and cmts with subinterface. When one cable modem wants to regester and the following information will appear in CNR log.i have disable dhcp server attribute"vpn-communication" and ignore-optionslike option 82, 220 but the situatio...

Hello All,We have deployed VPN's via ethernet and we integrate that via dot1q VLAN's on a subinterface on a GigEthernet. We then make those a member of a specific vrf forwarding VPN for example.interface GigabitEthernet0/1.101 description VPN-CUST1 e...

Can someone please explain briefly when should I use the HTTP/FTP AIC signature engine over any other type?I ask this question because for instance the FTP commands can be looked for in either String TCP engine, Atomic TCP or FTP AIC engine, but whic...

I want to do the following:Only if the target of the attack is MailSrvand the RR > 85--->block attackerIf target is any other host -->don't block===========My problem is that I cannot specify the dst IP in the event action override.So my only choice ...