Network Security

Hi all,we want to upgrade many PIXs fromold version 6.x to 7.x.What we really have a lot is VPN surrounding all our network. A lot of dynamic VPNs as well. Every PIX is in failover pair.So my question is what problems we can expect and what we should...

HiI need some advice, I need some good software that can take the ASA syslog an make in into something readable, preferably graphs on a HTTP interface.And I am looking for something that does not cost as much as CS-MARS.any sugestions on what works w...

Hi,I have configured a username with privilege level 2 on my PIX but have not defined any commands for Level2.Even then i observe that when i logon with those credentials iam able to go to the configure mode and by an large execute all the commands.W...

Hello,I need make a signature for detect more of 120 conection by minute to a one URL, how i can do it?.Regards.

I'm looking at 2294 alerts from 1012 sources... I think there is a problem here.Default configuration doesn't log anything (the sig is a meta). Turning on verbose alerts or logging just gives me the tail end of the conversation, which appears to be a...

I have a brand new Pix 515E and connected its outside eth interface to our Cisco IAD2400 router and the active LED won't come one. The sh int command shows that the interface is up and line protocol is down. Yet, when I connect the same Pix interface...

PIX 515E, 7.1(2) Existing Citrix clients on Inside, can connect to a Citrix Server on the outside. This is an older CITRIX version, been running for over 3 years without issues.New installs of the client fail, seem the Citrix license key is not trans...

Hi,I am pretty new with PIX (version 6.3) and I am trying from my PC in outside (192.168.0.2) to ping the inside interface (10.35.121.98) or any host in the inside.Here is my configuration, I do not understand why it is not working.- I authorized icm...

I didn't get much traction with my last attempts to understand event summarization, so I'll give a real example. I've modified the ftp authorization failure sig (6250-0) as follows:Event Counter------------------ Event Count: 10 Event Count Key: Atta...

hi there,My w2k clients could not registered with CSAMC, WinXP registered o.k. I am running CSA 5.0.176.All clients in same TESTMODE group. Any idea ?Thanksade

Does anyone know if Cisco's developing a sig to detect the MS Server Service vulnerability (MS06-035)? Thanks.

Hi All,Can 802.1q be used for monitoring with IDS? is so can someone guide me as to how it works and how its configured.I have been searching for more information to no avail.. please help.

Is there a way to configure DHCP reservation on a Pix501?I know Pix can act as a DHCP server, but I can't seem to find anything on reservation...I need certain client PCs to have particular IPs so that I can exclude those from deny ACLs.

I havn't seen this emailed out as an alert yet, but has been posted to Security Focus.http://www.cisco.com/warp/public/707/cisco-sa-20060712-ips.shtml

Hello,Is there a script available (perl, unix sh, etc.) that takes a 6.3 config file and outputs the 7.0 config?thanks,MW