Network Security

looking for the sigID that would fire on this. We are running 4.1(5)S216.

I have a problem with 2 pix connected as follow:CLIENT INSIDE ---> PIX 6 (NAT) ---> PIX 7 (NAT) ---> INTERNET SMTP SERVER OUTSIDE.if the client try to connect to ANY the ESMTP Server on internet (telnet to port TCP 25) the connection hang up: on the ...

Hi all,I'm trying to configure all IDS systems to use NTP service, but the software (IDM as well as VMS) asks for NTP server IP, Key and Key ID. All these fields seem to be mandatory. My NTP server is not configured for authentication. What can I do?...

HiI have the following setup:Cisco ACS 4 for WindowsCatalyst 2950 EMI with the latest imageCisco Trust Agent client 2.0 with the supplicant for 802.1x authenticationI only want to configure posture validation. The client should not be prompted for cr...

How do I install an existing configuration to a PIX 501 firewall?regradsPascal

Hi,I want to configure my sensor such that it sends a reset packet if it detect string "ool" in the payload. Also, the sensor should send the original packet from the attacker included in the alert. I created a custome signature with STRING.TCP, but ...

I am trying to understand how event or alert filters work in version 5.x. If I use VMS ipsmc to manage the sensors, how do you add a sensor filter for a particular event that we do not want to see appear in the SecMon console any more. It looks like ...

What is the correct way to bring the vms server back in sync with the sensor signature version? E.g. if the sensor is already at version 5.1(1)S221.0 because upgrades to the sensor were applied via the CLI and you would now like to add the sensor to ...

Regarding above signature, I already checking on my exchange server (2003 with SP2) and confirmed we are patching with MS05-021 (KB894549) but there is still huge alarm fire between my exchange servers on this signature daily.Any1 experienced this be...

Anyone know the best way to block Instant Messaging on an ASA (7.1) box? I'm taking that using a service policy is the correct method? I'm currently using the default service policy so I'm not sure what I need to remove from the default policy to acc...

Hi,we recently connected through extranet (leased line) with a partner, to use a web based application written with java servlet applets. We got complaints from our users that the time for pages to load is very long. We did some latency invastigation...

Hello Sir, I have 1 PIX 520-DC, now i want to creat 1 VPN. my remote site engineers wants to connect or use my corporate services. I have some knowledge about VPN so i can creat it with 2 methodes 1 with Cisco VPN client and 2 with PPTP and L2T...

Hi All,I am wondering if anyone has been able to get NAC v2 working with OfficeScan 7.0.I have been trying for some time now, but have had no success. I can get NAC working with OfficeScan 7.0 if I use CTA v1, but when I install CTA v2.0 on the clien...

Hello I am hoping someone can help me with this.On a site to site VPN with 2 Pix firewalls. I need to be able to use wins resulution for printers and such. remote network is connecting across the IPSec tunnel to a terminal server. In normal situation...