Network Security

We had sig 5474 fire on two sensors. After looking at the packet and then the Regex in the sig, this just doesn't make sense to me.The Regex:([%]20|[=])[Ss][Ee][Ll][Ee][Cc][Tt]([%]20|[+])[^\r\n\x00-\x19\x7F-\xFF]+([%]20|[+])[Ff][Rr][Oo][Mm]([%]20|[+...

I have a router 1841 with feature IPS, How I let to know if the IPS has blocked a host? What command I can execute?Thanks.

Hi,My current setup is like this Internal -- ISA FW -- PIX515E-R -- ROUTER -- INTERNET. I wrote a static mapping between internal mail server and public ip and allowed through accesslist (only smtp). Now i can able tos end emails and all but not able...

I have a 2611xm with IOS/FW 12.4After enabling IPS, I get the following when I show ip inspect sessions Session 83E4AD08 (192.168.5.101:8)=>(192.168.240.251:0) icmp SIS_OPEN Session 83C84EAC (192.168.5.101:8)=>(192.168.240.170:0) icmp SIS_OPEN Sessio...

This is a little 831 router (12.4.4T) with one private and one public interface connected to a 1000/256 ADSL circuit. There is a VPN to the Head Office with a GRE tunnel and EIGRP.The Tunnels bandwidth is set to 1544 since there is a frame-relay back...

Hi,I do new statics & ACLs in our PIX (v6.3) mostly by following working examples. Usually that works.The other day I tried to put in a new static, but then was unable to ping the outside address. Two things about the inside address I was trying to...

hi. I swapped out a pix 506e for an ASA, but built it from scratch instead of transferring the config. For some reason traffic wont seem to pass in or out of it, and I cant seem to figure it out. I attached the config.I added a gateway of last resort...

Is the standby address on the interface pingable in normal mode (Normal mode meaning primary is still active and 2nd one is still in standby mode)The reason to ask this is one of our customer configured the standby address which is used for another d...

Hi there .. I am currenty working on a project and need to find out as to whether etherchanelling load balancing can be configured between several IDSM-2 running on inline mode. The IPS 5.1 admin guide states that it is possible for IOS based switch...

Hello guys. I am stuck here. I have reviewed the Cisco docs and it has gotten me nowhere. I have a very basic setup and have gotten as far as this. setup E/0 (outside)as 66..x.x.xsetup E/0 (inside)as 10.1.3.1What are my next steps? I just need to ge...

When connecting "From" a WinXP workstation (with RDP enabled) through WebVPN, An RDP connection appears to contact the local machine instead of the remote host. All other protocols work fine (SSH, Telnet, SQL)Turning off RDP on the XP workstation see...