Network Security

This signature FPs on a particular client POST, see attached text for examples.

Hi. I am replacing a pix with a pair of ASA 5520's. I have the new config into one of the 5520's and it seems to be working just fine.Now i need to put the second one into the mess by having it active/active Failover. Does anyone have a sample config...

We've got an ASA5510 that is blocking outbound mails for certain domains (for other domains there's no problem, there are no issues with any inbound mails as well). The mail server keeps logging this "The DNS server encountered an invalid domain name...

Hi Everyone,I have my ASA5520 setup with radius auth on webvpn and everything is working great, even group assignment with the radius class OU=group1; etc...I need to go a step further with this. I want users to not have to reenter the same userid an...

Anyone can recomend a good reference on how to set up IPSEC hairpining? we have an ASA in one city and a pix in the other. We want to be able to vpn in to one and tunnel to the other if needed.

With SecMon 2.2, the TCP SYN Host Sweep (3030.0) fails to display the victim’s port in the console. The console shows <n/a> in the port field. The sensors are at version 5.1.1p1. The command “Show Events Alert Info” on the sensor reveals that the des...

After changing the IP address of the TFTP server in my Pix config, the config backup on the TFTP server failed.The error message displayed while trying to backup the running config via PDM is the following attached.Help pleaseRegards

According to a Cisco TAC tech. you can upgrade the ASA from 7.0(4) to 7.2(1) without doing incremental upgrades. But on the 7.2(1) release notes it states otherwise !HELP !!!Upgrading to a New Software Version If you have a Cisco.com (CDC) login, you...

I am getting more help on this forum than from BT itself they are so un helpfull is unbeliveable. Thank you everyone who helped earlier and will help now :)My very recent post on this forum was.." Cisco 3750--cisco Pix 515 E --- Cisco 877"***********...

I'm trying to change the Pix inside IP adress and DHCP scope, both the web interface and the command line interface tell me that the ip address doesn't match the scope ....or that the scope doesn't match the local interface. I have tried turning off ...

Anything thoughts? Are false positives being reviewed for next signature release?We are seeing alot of activity triggering this signature. The attacking ip is from Microsoft itself so must be a false positive?.... 207.68.179.220 (http://advertising...