Network Security

Hello,We recently installed our IDSMs and a MARS box to monitor our core traffic. I'm trying to set up a MARS "User Inspection Rule" to notify me when there is FTP traffic on a port other than port 21. Is there an easy way to do this? I don't see a...

Greetings all. It doesn't appear that the recent S195 signatures are listed/referenced in the Secure Encyclopedia.Can Cisco confirm this? If not, when can we expect them to be listed? Thank you.

Please advise what are the requirements to allow VMS MC 2.0 to support both versions of IDS signatures. We have a few devices on IDS-sig-4.1-5-S196 and some on IPS-K9-sp-5.0-4. TIA,Simone.

Hello All,We have set up a IDSM2 version 4.1 on a Cisco Catalyst 6500 switch.We have configured it using SPAN on specific vlans and if we run a port sweep, we can see the alarms on the IDS viewer.It is possible to stop any attack by dropping packets/...

Hi!I would like to realize the reset of a single TCP connection (Ip adress + port number) using a CISCO IDS 4235,Version 4.1(5)S194, with a PIX 520, IOS Version 6.3(3) and a 4500 router, IOS Version 12.0(8b).Is it really possible by this hardware?I t...

We want to change these to ports to another number in our PIX 515E. We are using it for incoming and outgoing email. Can someone help in what we would change? Thanks soo much!!!

I have configured two IPIP VPN tunnels from the main office to the branch offices. I would like to apply QOS for specific traffic and when I go in to the Tunnel interface to apply the QOS Pre-classify command I couldn't find it.I am aware that this c...

Dear All,I want to give the whole lower security network 10.10.10.0/25 access to the internal higher security network 192.168.100.0/24.without using NATWhat is the pix cmds in ver.6.3 to be used?In one-to-one Translation we can use static (inside, dm...

I'm following Doc 44905...http://www.cisco.com/en/US/products/hw/vpndevc/ps4077/products_configuration_example09186a00801c0e3c.shtmlAnd I can't get blocking (hostShun) to work. The alarm pops but the host is still connected and there are no entries i...

I am able to get to the login screen via SSH. I login with my username and password but receive the following Error: Cannot communicate with authenticationApp (getUserAccountConfig). Please contact your system administrator. Would you like to run cid...

Hi,As I want to start the Ciscoworks application it says: The Java runtime Enviroment cannot be loaded from <\bin\hotspot\jvm.dll>!I already uninstall all Java versions end reinstall the JRE 1.4.2_08.Any advice?

Anytime we attempt to configure the Novell NDS External User Database in ACS we get the following error messages. An error has occurred while processing the External Database Configuration Page because of an internal error.. External Authentication...

I need a firewall PIX with three interfaces ethernet (DMZ).What's more cheaper solution about ?thanksLorenzo

We have a 3030 running 4.6.x with a fairly simple configuration. Currently we have just one group configured on the concentrator into which all users are placed. We authenticate our users with a radius server. The radius server in turn gets authent...

Dear Sir!After password recovery procedure on PIX-515 (6.3(4))after ENABLE command, my PIX begin to ask me Username:Password:I don't understand how it's possible (why Username?)So, I can't to enter to privilege mode. How can I to recover my PIX anywa...