Network Security

Recently we noticed that the HTTP POST request containing SOAP application is not passed through the PIX (7.1(2)) with default inspection rule.The message is:--------------------------------------------Hypertext Transfer Protocol POST /rcu/rc.asmx...

Here's a question about the mechanics of how the PIX handles ARP (I think!)Assume, just for example, I had a 'standard' PIX installation. 2 interfaces, inside and outside, on standard security levels. I've a number of external IP addresses I can use ...

I had a question regarding securing our webservers that use IIS. We have 2 options in play. Which one is a better solution to secure IIS from the IIS vulnerabilities and etc...? I know both have advantages and disadvantages.Here's the setup, a Cis...

Just starting out trying to tune some signatures to fit our environment, and looking for clarification on some parameters of IDS signatures.For example: 2152 - ICMP floodIt uses the "Flood Host" engine with the action parameters:Limit type: percent...

Hi everyone, I have the following case:2 x Cat6509 (HSRP master and slave)2 x IDSM blades (v5.0 - 229)each Cat has his own IDSM blade install online (not inline), with 2 monitoring sessions on each Cat.There is any way to monitor traffic over 600 Mbp...

My daughter has a HP IPAQ and my PIX 501 generates the following message:%PIX-1-106021: Deny udp reverse path check from 169.254.2.2 to 255.255.255.255 on interface insideMy daughter has an HP IPAQ and I think that this is coming from her IPAQ trying...

Hi!We got an ASA5520 with csc-ssm and i wonder if there is poosible to control bandwith to the Internet for certain ip-subnets.We would like to restrict bandwith for inside net 192.16.1.1/24 for both incoming and outgoing traffic to the internet. We ...

Hi!How do i configure the outside interface if i'm using dynamic ip to the internet. We do not have fix IP ADSL Internet subscrition. So what need to be done on the outside interface?Thanks.

Hi,I want to set up a lab with the latest IPS module.I would like to know what is the latest module, what catos and ios versions it's works with and how much Dram and flash memory do i need.I'm using catalyst 7600.thnx

Greetings all. I have a 4215 appliance running 5.1(p1). I want to create and run scheduled tasks via crond. This is what I've tried,1. As root, create a /var/spool/cron/crontabs directory.2. As root, add a scheduled task via 'crontab -e'. I can see '...

I have installed a new Exchange 2003 server on our LAN which, after a few tweaks in the PIX config is now working OK. PAT is enabled on the PIX with a single static translation for remote access to the database server. The following lines enable the ...

Hi,I have a pix 515E, 3.6(3). The pix blocking a Internet access sometims. I can not ping Interfaces at blocking time. And my syslog logging shows that connection are stopped. How can I find out the resen why. To make pix work igen, I have to turn of...