Network Security

It seems that the newer 7.0 ASA/PIX OS does support the inspection of the Gnutella protocols like Limewire. The older PIX OS clearly stated you had to use NBAR to filter it out. But I see no mention of anything other than Gnutella and wanted to ensur...

I have an issue in that we have a pair of Pix's (version 6.3) and a router plugged into a switch. The firewalls are ours and the router is a customers. We have static routes on the firewall to the customers networks off their router however if the li...

I am having an issue where the AnalysisEngine will not stay running, as i am looking into this i see available disk space (100% usage), could this be part of the problem? how do i free up space on the ips?Here is the show verUsing 1150967808 out of 3...

HiI was wondering if it is possile to monitor the diskspace on the partitions of the sensor by using the built in snmpd on the IPS 5.1 sensor appliance. When i try to snmpwalk the sensor i cant see the usual net-snmp stuff.The "cisco.ciscoMgmt.ciscoC...

Is it possible for a Windows 2000/XP user using the Cisco SSL WebVPN client software from a VPN 3005 concentrator to logon onto a Windows domain or active directory and run their logon script? In the IPSEC VPN, you could do that before with the "Ena...

Starting this thread to gather inputs on creating custom HTTP signatures to detect specific URL sites. Has anyone used the regex in IPS 5.x to specify certain web URL to log or deny ?Ex: Signature that can detect, log or block www.yahoo.com

SENSOR-01# conf tSENSOR-01(config)# service hostSENSOR-01(config-hos)# netSENSOR-01(config-hos-net)# show settings network-settings ----------------------------------------------- host-name: SENSOR-01 default: sensor telnet-option: disa...

I have updated our various IPS sensors to this latest version. Many [or all] of them seem to be caught in a loop where they are reinstalling IPS-K9-min-5.1-1a.pkg. Anybody else having this problem? Is this a known issue?

Hello, i bet this has being asked many times, but i cant seem to trace any.this is my network.pix501 -> noncisco switch -> catalyst 2950.I want to configure three VLANs on the 2950. What would be the configuration on the pix to route the vlans. Thank...

HelloI have my PIX 515E Restricted (16MBRAM/8MB)- 2 Interfaces.I like to implement:- 7.0 OS Software- Failover- Out of Band Management InterfaceIt's correct that I have to buy:- Upgrade License to UR for my PIX- 1 new ETH Intefaces- 16MB Flash / 64 ...

Dear all,I have two pix 525 firewalls ( one with UR license and the second one with FO-AA license) , firewalls are running in active/active mode . this set of Firewall is connected to a perimeter router connected to Internet , My question is how do i...

Who knows how to configure PIX firewall 501 to allow another network to ping the outside interface of the firewall? Please Help...

One of our site offices have a PIX 506E firewall and connectivity through the PIX is all well, except for port 9999. The access-list applied on outside interface (inbound) is below. access-list acl_out line 1 permit icmp any any (hitcnt=5)access-list...