Network Security

I'd like to log IOS and PIX events to a MySQL database and have some type of a GUI front end for viewing them. What are my options?Thanks!

I have 2 t1's from 2 different providers connecting 2 different 1700 series routers.I can't really do BGP here, but what would be the best way to connect the secondary internet connection up to an ASA.If I could have one connection for VPN and one fo...

How to access systems behind a firewall in a different location (say 10.80.12.1) and my subnet is also in the local range (say 10.80.12.3) but geographically separated.

Hi,Is it possible to capture pix's traffic 24/24 hours and tftp it automatically to a host ?

Hi,We are having cisco IPS 4255 with IPS version 5.1.1 and latest signature. We are connected IPS is in promiscuous mode and we are seeing all the signature are false in security monitor 2.2. Please help me to overcome from this problem.Regards,Ram

We've successfully VPN into the other domain but we're unable to access the devices in that domain. What could be wrong?

About a week back I used the erase command but actually (I think) erased my .bin image file from one of my ASA 5520s (We were in Active/Active configuration during testing, but decided to go with Active/Passive) so I attempted to erase the configurat...

CiscoWorks ipsmc 2.2 adds a space between the ports when you update the variables for web-ports. ie 80-80,8010-8010 is changed to 80-80,space8010-8010. I think that this is an error. If you change the port list to include a new port, when you deploy ...

Has anyone seen this? Since upgrading to IPS Event Viewer v5.1 my export files no longer have a "date & time" column like they did in the older v4.1 Event Viewer. Because of this, I cannot export the IPS data to create reports (not time and date, j...

For v4.x sensors, support for Attacker/Victim Loc is defined through setting address ranges in IPS MC > Conf > Settings > Internal Networks (IDS 4.x)After upgrading a 4.x sensor to 5.x, the internal networks (stored in $IN) now show up in Event Varib...

let's say I have signature with the following characteristics:Event Counter-------------Event Count: 1Event Count Key: Attacker and Victim addressesSpecifiy Alert Interval: NoAlert Frequency---------------Summary Mode: Fire OnceSummary Key: attacker ...

This signature FPs on a particular client POST, see attached text for examples.