Network Security

Does anyone know of a way to tell SECMON to not show an event in the Event viewer but still have it in the DB to report on? Example would be IIS Unicode sig, this fires all the time on our sensors, we have Deny actions setup and do not need to see th...

Hi,Please can someone help me. I'm really new to this so it might sound trivial you all. We have just purchased a PIX 501 firewall and I'm trying to access the CLI I type telnet 192.168.1.1 (internal IP of 501) and it denys me access. Am I doing t...

Hi! I have a ASA 5520 With AIP-SSM-20 and I have a question about Application inspection. I am not sure about the features in the command “class class-default”. Is the match default-inspection-traffic and the inspect command associated with it, unnec...

Hi. Does anyone have any information as to how best to use thin client conmputing within a NAC regulated environment? I wish to implement NAC to secure my laptop/desktop population, but want to know of any ideas when it comes to thin clients and pr...

Please,How could I enable pptp through pix, without problems, time outs, warnings, etc..The client VPN is in the inside and the server is in the outside.fixup ?access list ?static ???To reach the outside there are two firewalls pix.Thanks.

I have upgraded 6.3.4 to ver 7.0.4 to use pix 535 in transperant mode. I just want use one network on this box. Please help me to configure this.

Hi,I have 5 networks with 2 routers behind PIX 7. I tried to assign route to different Networks located inside Pix in Pix. A Sample configuration isroute inside x.y.z.0 255.255.255.0 a.b.c.1The local segment has inside interface of PIX as the default...

Can I use a dns entry instead of an IP address (208.134.161.5) in the following:access-list inside1 permit ip 10.0.0.0 255.0.0.0 208.134.161.5 255.255.255.0

I've spend many hours over the last week working on intermittant sensing interface failures on our IPS sensors (models 4235,4240,4250,4255) after an upgrade to 5.1-1a. I even rebuild 6 sensors from scratch using an 5.1-1a ISO image, and 5 out of the ...

I have a 501 with the 6.3.4 os. I had set up a logging host thusly: logging host inside 192.168.1.4It was working fine but I needed to change the IP address of the logging host. I thought if I just entered the same command but with the new IP it woul...

Hello, is it possible to have the ASA 'listen' on two public IP addresses, but connections initiated TO either of those public addresses are directed to a SINGLE host behind the firewall?Also, the connections would all be going to a single service (t...

Hi GuysIs it possible to log SYSLOGS from an ASA to Security Monitor? I currenlt have an ASA that I have configured to send syslogs to a VMS box however the events never seem to appear in Security Monitor.I'm sure I've done this before with a PIX 515...

After having worked with an AIP-10 for a while I was wondering if there is a way to import/export signatures. This would of course be primarily custom sigs as there is little use in exchanging what we all have in common. I did not find it in the GUI....

Hello, We recently upgraded our 4235 and 4240 up to 5.1. Both sensors were previously runing 4.1 code. Now, the sensors will stop sending alarms after a random amount of time - one sensor shows the analysis engine not running, the other does - howeve...