Network Security

We need help.- Need to upgrade 30 sensors from IDS4.1.5.S204 to V5x. - Upon applying IPS-K9-maj-5.0-1-S149.rpm.pkg the upgrade failed with the following error:component "signatureDefinition" and the instance "sig0"/signatures/[sig-id=2001,subsig-id=1...

Hi,I have a Linksys ADSL2 modem that can work as a transparent bridge. Various websites imply that when it is in this mode it changes the DSL to Ethernet and therefore I was wondering if anyone thinks it would be possible to setup the PIX as a PPPoE...

I want to use DMVPN and terminate the hub tunnels through a NAT boundary on a PIX firewall. Does this work? Can I just enable NAT-T on the pix and create a static NAT entry for the HUB device? The spoke routers will not have a PIX and will have stati...

Hi, I have 2 pic's I want to upgrade.The first one I upgrade in monitor mode no problem. But when I do the copy tftp to flash afterwards when it boots up, it gets an error from the file, I have tried everything I can think of. The 2nd pix gets the sa...

Good day all, I would like to express my concerns with the fact that NSDB seems to now only be accessible through the web. We have used this NSDB on our closed network and cannot use it otherwise..........is it possible to have the full NSDB database...

Hi, I just got my ASA 5520 firewall with (ASA SSM-20 module) couple weeks ago, and I am trying to configure IPS features but I getting this problem:This is output from CLI:-------------Asa5520fw# session 1Opening command session with slot 1.Connected...

Hello,can you please anybody confirm to me, that when active unit went down and the failover cable will be physically disconnected the secondary unit with FO licence will work properly? Is it true that every 24 hours the standalone unit with FO licen...

I don't quite understand the context that is sometimes included with events. The event in particular I was looking at is 5442-0.First of all, what determines whether context is included with an event? The action for this particular signature is "pro...

Hi.I had IPS MC 2.1.0 (Build 123) functioning fine. I installed the idsmdc2.1.0-win-CSCsc336961.tar file in order to solve the CSCsc33696 bug. Next, I installed an update signature for IPS version 5 (But I didn´t has any IPS sensor version 5, I just ...

The sensor is inline and the webserver app has stopped. Also I am unable to create the service account because of an error: setenableAuthenticationtokenstatus: failure setting the account's password. Any ideas?

We have an IDS ver 4.1 in a cat 6k, and initially addressed it in a lab in vlan 1 as such:vlan 1: 161.220.60.1 /24IDS: 161.220.60.10 /24the IDS gateway is Vlan 1 ip. this has worked fine, able to ping and telnet btw. the 6k and the IDS. but in getti...

Hi,I am trying to enable my PIX for IPv6, so that I can connect from my internal LAN into my DMZ. But I run into some problems and I am not sure if I understand the IPv6 inplementation on the PIX correctly.In IPv4 I can create a connection from host ...

Hi All,Does anybody know how ids do tcp reset? in ios IDS, the router can send a reset packet, but in a real IDS, how can the ids tell the router to send a tcp reset packet?? Thank You!Best RegardsTeru Lei

The signature id 5648 (Tomcat Denial of Service Attack) seams to be prone to false positives.... We have seen in a number of incidents, that when the destination of this attack uses the ephemeral port of 8007 with an established connection on TCP por...