Network Security

Is there a signature to cover this one already because if there is my sensors are not seeing it. I tested against my lab sensors. The exploit was successful and the sensors did not fire an alert. I ran tcpdump to make sure they were actually seein...

I manage a PIX 515 at a hotel on which the DMZ port is used to provide Internet access to clients. The PIX is configured as a dhcp server on the DMZ. I want to track how many clients connect to the Internet throughout the evening. I can manually logo...

where can I find a good resource that explains that meanings of the various flags and logging messages as displayed in the logging output of a pix firewall. I'm looking to get more familiar with distinguishing which end is sending what flags, tcp res...

Help can anyone explain wht this means keep getting disconnected to VPN concentrator

I have been reading the doc on Maintaining Security Monitor since having my issues. I noticed several mentions of perl scripts such as "PruneDefault.pl" I search the HD where VMS is installed and I can't locate this script or others mentioned in the ...

I have these two files taking up GB of space on the CiscoWorks VMS box. I can not seem to find how to purge or manage these files. Any help would greatly appreciated.

I have lots of users connecting remote access as well as remote 3002's disconnecting with the above message.I have not been able to identify a trend of any kind or even find more information on what is happening to cause the disconnect.Does anyone ha...

Hi there, im using 3 Pix 501 for a VPN over PPPOE. The first Pix is acting as the VPN Server with an static external IP Adress. The other both establish the IPSec Tunnels to it. The "server" PIX is working on a 2Mbit SDSL PPPOE Connection. The Pix Cr...

I have a Netscreen to PIX VPN connection. The PIX acts as a hub to other VPN devices. I need to have hosts behind the Netscreen connect to hosts behind a third device. I have attached a jpg file to illustrate the topology. All vpns are up and working...

Is there anyone out there..that knows for sure that a PIX515e-R can be downgraded to a FO status....so that the pix can be used for Failover with an UR PIX that is identical...I've checked for the past two years and noone seems to have an answer...or...

Using a PIX 515 I've allowed external access on port 1677 to 2 NAT'd servers. One server sits on the same LAN as the PIX, the other sits on another site over an MPLS core.I can attach externally to the server on the same LAN, but cannot attach to the...

Hello there,I am new to Cisco Pix and was wondering if I can get some inputs as to where I can go from my situation.I need to open several ports on the Pix 515 we have right now. It has ISO 4.4 (1) install on it currently. My manager is leery about ...

The regex for this sig is as follows (and can't be changed):[Cc][Oo][Nn][Nn][Ee][Cc][Tt][ \t].*[:].*[ \t][Hh][Tt][Tt][Pp]Why can't we make sure the port is specified in the regex to reduce false positives? Something like:[Cc][Oo][Nn][Nn][Ee][Cc][Tt][...