Network Security

The regex for this sig is as follows (and can't be changed):[Cc][Oo][Nn][Nn][Ee][Cc][Tt][ \t].*[:].*[ \t][Hh][Tt][Tt][Pp]Why can't we make sure the port is specified in the regex to reduce false positives? Something like:[Cc][Oo][Nn][Nn][Ee][Cc][Tt][...

I have seen several references to a no downtime upgrade capability with the Pix 7.x software, but have been unable to find a documented procedure on cisco.com. Can anyone point me to the procedure? Thank you!

Configuration shows ERROR: Command requires failover license6.3 config ip audit name info-sign info action alarmip audit name attack-sign attack action resetip audit interface outside info-signip audit interface outside attack-signip audit attack act...

Can someone tell me if you can replace the ASA-SSM module in an ASA 5500 without powering down the ASA. Here is the steps in the hardware guide.Replacing an ASA SSM 10/20 To replace an existing ASA SSM, perform the following steps: ------------------...

Hi,I have an IDSM2 running IPS5.1(1d)S220 upgraded recently from 4.x. My network has windows desktops (spanned on multiple subnets) whose default gateway is a Cisco 6500 FWSM module. Since I upgraded to IPS 5.x, I am seeing lots and lots of TCP Hijac...

I need to upgrade this ASA device as shown in the subject. However, I have not found documentation that details this process online. I wonder if this process is starting to look more like a router....copy file to flash, set boot parameters, reload......

Hello,I am encountering the following error message "%PIX-6-110001: No route to dest_address from source_address" on my corporate PIX firewall. I am very sure that there is a route in the routing table. In other words, it is just routing between 2 ...

Hi I am trying to create a Site-to-Site VPN connection between a Nortel box and a Pix 525. I am able to get phase 1 up in QM-IDLE status but not able to get phase 2 working. I think there is a routing/nat problem but I am not sure. The inside network...

New user of Cisco gear and this is my first question submitted here so please bear with me ...Have a new PIX 506E with 6.3(5)Have a Solaris system for a tftp serverHave the tftp-server configured on PIX as:tftp-server inside clmco2223 /tftpbootI have...

How do I configure a new signature on the Cisco IDS 4215 to let me know if a certain level of web page requests has been made from a certain IP address (say 2000)? I would like to know if a particular IP address is making way too many requests for we...

Hi guys,is it possible to communicate between vlans configured on the same physical interface of the firewall?thanks

hi everyoneI am getting annoyed getting NAC to work.I just want to make it work with a client, an ACS and a 3550sw or 2611XM router.I installed the necessary IOS on the router, i installed CTA on client and i think i have done all the wright configu...

Is there an a entry on Cisco secure (6.4) to add in configuration to ridirect request URL forward an a SYS log like Kiwi ?best regardsLorenzo