Network Security

We have a VPN 3005 Concentrator. We want to be able to see the Group Name (User Management, Group) from the VPN Concentrator in the Accounting on the RADIUS server. What RADIUS attribute would you need to setup on the RADIUS server in order to see ...

This is my current setup. I have put a server on the Outside66 Interface and am trying to access a default IIS Website on a server on the DMZ. I am not sure why but it wont allow me to access it through the firewall. I have included my config as well...

OK, might be a dumb question but wanted to know when setting up the CSC SSM network module and management interface if I will need to have a seperate VLAn set up for the management network to be able to have my traffic scanned by the CSC device and t...

We have a set of servers installed in our lab as they will be in the field with the firewall between them and our in-house network. We want to temporarily allow users on our in-house network (connected to the outside interface) to have telnet access...

Hi everyone,I have DHCP enabled ports on my cisco and 3com switches. Can NAC block illegal intruders? Can it support 3com switches as well?thanks,Paul

I need to send different DHCP options to users; however, I need to put certain groups in different subnets. Is it possible to setup the concentrator to relay for addresses from different scopes?

We have a site that has 2 DSL accounts. Is there away that I can create one veritual tunnel back to the central office's 3005 VPN using both DSL accounts? We will need to purchase equipment for the remote site and money is an issue, I do have availa...

I am looking to create an event variable for any external IP addresses. My current event variable value for $OUT is: 0.0.0.0 - 255.255.255.255. Is there way to make it so that this event variable excludes my $INTERNAL and $DMZ address ranges? It s...

Hello all.I've configured IDS to shun with cisco router. I think all of setting fine, but IDS can't configure acl on the router via telnet.Here is the output from ids using sh statistics networkAccess.if you see the output, the state is Inactive.Coul...

I have a couple of IDS sensors feeding events into CS-MARS. I have two options; I could filter them in the IDS sensors, or in CS-MARS.Where is the best place to filter them?

Hi,I had created a signature on my IDS. Even though I have deleted it and it does not appear in the configuration, keeps generating the events in the event viewer.How can I stop this.ThanksSalil

Hi guys, I have been looking all over to find out if I can enable the number of authentication attempts using SSH in PIX. Is there a way on the pix that allowes ip ssh authentication-retries 3 like on the router?Is there any methhod of limiting the ...

First of all, we use the autoupdate functionality to upgrade our sensors. I have a test sensor that was upgraded to IPS-K9-min-5.1-1d (from 5.0.6) some time ago. I'm now trying to upgrade the signatures. It is not updating. Instead it seems it has ...

Hi:I?ve just bought an ASA5510-AIP10-K9(ASA 5510 Appliance with AIP-SSM-10, SW, 3FE, 3DES/AES) to implement perimeter security. I planned to use only 1 DMZ but things have changed, and now I need to implement a second DMZ. The ASA-5510 has 4 ports in...

hi all,I recently deleted one of my nat statements because i needed to change the address the inside was being natted to. well i removed the old and added a new. i see it in the running config. but when i ping from the outside world, the old addre...