Network Security

Is there a generic step by step way for one to start his network off using IPS/IDS? We have 2 4235 1 FWSM and some PIXs and VPN concentrator soon to be monitored by CMS. Do I set the IDS device to report all information and then tweak from there? A...

I want to change the IP-Address shown in the RME for my MSFC2.How can I do this ?

configuring a PIX515 to support a VPN tunnel allowing RDP(3389)and icmp/ping. The tunnel is functioning properly. When it first establishes I can ping across the tunnel. Once I make a RDP connection I loose my ability to ping, all ping request time...

We have a remote site that needs to VPN into our network. Since the sessions they use are mostly telnet we went with a DSL line from a local ISP. For firewalling we use a PIX 506 with Ver 6.3 of the software. Our ISP provided us with a static IP for ...

Hi all,I have a PIX 501 running ver6.3(4).I have disabled PDM and HTTP server with following commands, and removed all pdm and http server statements.pixfirewall(config)# no pdm history enablepixfirewall(config)# no http serverI have no web servers i...

How do I view the OSPF or BGP configuration of a PIX firewall.The sh config command doesn't show me anything.

Hi. I need help to configure a Cisco VPN concentrator. I´ve created an Active Directory's group and added 2 users. In the CVPNC i've configure LDAP autentication and autorization servers.But i just get to give access to everyone in the Active Directo...

Every time I boot one of my 4 PIX, it stops at the following displaying in console. It does not even come to the point of accepting break. The ACT LED is dimly flashing, the power LED looks fine. ACT LEDs at the back are flashing. Any suggestions on ...

What determines whether the alarm type is collected by secmon as IDIOM or SDEE. I have some Version 5.1(1p1)S222.0 sensors that appear under alarm type IDIOM and some Version 5.1(1p1)S222.0 sensors the show up as SDEE on the SecMon 2.2 console.How do...

Hello,Is it possible to store the ip filters which can be assigned to vpn groups within ACS? I know it is possible to point out a filter via RADIUS which is stored on the concentrator, but I would like to have the filter in ACS. We are having a coupl...

Hi,I need help for this dmvpn implemantation. Before this i'm using vpn site-to-site and it work fine but after I implement dmvpn, the packets start to drops seriously. This is my implementation plans and the configuration of the routers. Could someo...

Hi, is it possible to log information about outgoing packets from a specific ip address.. mayby through acl ?? I want to be sure there is no ingoing or outgoing traffic to or from this ip address.. because traffic should remain inside (but before I s...

Is it possible to use CiscoWorks 2.3 app. (Management Center for Firewalls 1.3.5) to upgrade Cisco PIX OS from version 6.3.X to version 7.1.X or is it a better approach to use CLI & TFTP Server and then move to ASDM?According to Cisco PIX OS 7.X data...