Network Security

We currently have 2 firewalls at our site, each w/ there own public IP. One is a SonicWall (used for VPNs for a specific department as required by a 3rd party) and the other is a Cisco PIX 515E - restricted (used for other VPN connections and all ot...

We are running a Cisco 4215 that is sending the following SNMP error trap but there is not idication of what the error is:Message: Trap received from sensor with SNMP Varbinds: sysUpTime: 3 days, 4 hours, 23 minutes, 3 seconds. , .1.3.6.1.6.3.1.1.4.1...

1. Is that correct that SSM failover is *not* stateful and all user sessions need to be reestablished (norm. engine will drop out-of-session packets). 2. Does the SSM compatible with A/A failover and with security contexts? 3. Does the SSM compatible...

We have a Pix 515 and the DMZ is very slow since upgrading the firmwaire from 6.3 to 7. The Pix only has 64mb, but we are having a 128mb sick delivered this week. Will this improve the upload speed to the FTP server? It was so much faster before t...

Does anyone know if the plan is to use these devices to phase out the Pix's? How is cisco positioning these devices in the marketplace compared to Pix's?

hi,I'm a bit confused about the SSM's on the ASA: I know that the SSM-AIP provides IPS/IDS and that the SSM-CSC provides Anti-X.So does this mean that because you can only have one SSM, you therefore can only have IPS or Anti-X on a single ASA platfo...

This softcart signature fired and I started investigating it. The signature itself states that it's supposed to be the Regexp + 500 chars. However, as I was browsing the site that generated the alerts, I was able to trigger this signature numerous ...

I have a Pix 515e and when I do a show xlate I see the outside "destenation" IP address and the natted address with port numbers. My question is how do I correlated the natted address with port numbers to a inside users IP address?

Hi,I would like to configure my PIX 515 to allow the internet access only to one web site. I would like to use the url address and not the IP address.Can I use class-map ? And what are the commands I have to use ?Thanks in advanceRomain Page

Our CSA MC skipped logging for a few hours. When I search the event log I have alerts for that time. Is there a way to extract/export this?

I am new to Cisco IDS. IDSM2 version 5.0 (5) s215.0. I am trying to understand what makes the Win SMB Share DOS trigger. I am looking at my signature (attachment included) but don't see what makes this thing tick. On the other hand 3322/0 smb win...

i have a 3745 (seed device) connected to a 2611xm via a 2950 switch but the ani server cannot discover the 2611xm or even properly recognize the 2950 switch. i have configured the required snmp parameters and cdp is enabled on all devices. i can also...

I just replaced a 506e running v.6.3 with a 515e running 7.0. The problem is that I have a dynamically assigned public IP but the default route doesn't automatically get set on reload. I have to login each time, do "show ip" and then use the "route...

Hi,I have VMS 2.3 and SecMon 2.2 and two IDSs in there. I have noticed that the connection status for the sensors have changed from "Connected TLS" to "Paused". I have gone through database truncation process and all file sizes are good butstill havi...