Network Security

I am working for a company who is looking to replace there sonicwall device with a PIX, can anyone recommened what I should purchase, currently we have 15 users but looking to expand to 75 or so within the yr, with about 50% of these users being mobi...

It appears that the ASA device is now seeing the URL Server as down. It was previously redirecting traffic and seemed to have stopped. The URL-server stats show the URL-server as down, but I can ping the server from the ASA and the all of the websens...

Hi, We have some 4250-XL sensors with gigabit fiber cards. I want to use them with a fiber tap and am having issues with the sensing interfaces showing "link down." I have read a number of forum posts here regarding the fact that this is perhaps not ...

I am monitoring CSA Agents on the CiscoWorks Security Monitor. I notice that most alerts, specifically the alerts triggered by web server exploit attempts, don't record the Source IP address and Port of the attacker. I understand the difference betwe...

Hi folks-I hv PIX515E with version 6.3(3)running for the past 2 yrs w/o any major issues.Recently I understand that there is IKE vulnerability issue & this is applicable to all versions below 6.3(5) and hence planning to upgrade the PIX IOS to 6.3(5)...

Does anyone know if it is possible to change the message displayed in the icon tray when a CSA event occurs? Customer would like to change the balloon from the stock message to "Please contact xyz and extenion 123."Thank you!

Does anyone have any experience with throughput problems with Windows 2003 server and pix firewalls?We have 4 machines behind our pix 501 firewall: 2 Windows 2003, a Windows 2000, and an XP. The machines are all configured the same in the firewall.Th...

HiI'm using VMS2.3 and I want to turn off all windows related signatures on my IPS.How can I find all of them?THX

When a master blocking sensor issues a shun to a pix it shuns x.x.x.x / 0.0.0.0 which will block any host with address x.x.x.x making a connection to your PIX. However if we take the case of an IE exploit you want the SIG to fire and the shun to bloc...

Dear Support,Wondering if anyone can help me, but have a problem with two ASA5520 each with an AIP-SSM-10 module downloading the updates via FTP.I have the ASA5520’s configured in an active/passive failover, with two DMZs, the front end and a backend...

Just a heads up I had numerous files quarantined back on 03/11/06 and basically the VMS box stopped sending email alerts and I have know idea what else stopped functioning but here is a link if you see quarantine files on sig W95/CTX http://vil.nai.c...

Is there a generic step by step way for one to start his network off using IPS/IDS? We have 2 4235 1 FWSM and some PIXs and VPN concentrator soon to be monitored by CMS. Do I set the IDS device to report all information and then tweak from there? And...

I want to change the IP-Address shown in the RME for my MSFC2.How can I do this ?