Network Security

I just installed MARS 4.1 to monitor IDS (4.0), PIX (6.3.3) and several internal switches. Everything seems ok but the mitigation. It appears if the mitigation suggestion is a switch, the PUSH botton is activated, but if the PIX is the suggested solu...

Hi Experts,IDS signature tuning can get quite involved. To make sure nothing important is overlooked, is there a Check List that can be used?If not, what are some of the critical items that should be known beforehand?A couple items are obvious e.g. t...

I copied the old config and pasted to the new firewall. Saved it and replaced. For some reason that I cannot figue, no traffic flows through the pix. I can reach the pix from the inside.Is there some difference in command structure between 6.2 and 6....

On a PIX 515 with a 6.3(4) OS:I removed a NAT Static and added a PAT static with the same local address but a different global address. I then did a "CLEAR XLATE LOCAL XXX" where XXX is the local address in the Static. "Show XLATE" displayed the new ...

i have this scenariousers/dc/dns---pix----isa-----routerdc= domain controlerisa is member of the domain which is INSIDE of the pix.any traffic going out (ie http, pop3) are ok.The customer wants to filter traffic going out thru computer names at the ...

I have PIX 515 with a static address on the outside interface. I also have multiple sites with IPSEC connections to that pix. I want to provide some WAN redundancy with a second ISP. This requires me to have a second static address on the outside ...

Some advice required.I have been asked to develop a plan for managing our VPN environment. Unfortunaly experience is limited and I would appreciate some feedback as to what others are doing in similiar situations. We have approx. 100 remote sites wit...

Does anyone here know how to transfer configs from a sonic firewall appliance to a pix 525 firewall or would point me in the right direction of getting this done. Or do i have to reconfigure the pix firewall from scratch?????

When creating a Signature Event Action Filter and use an "Event Variable" ($INTERNAL or $OUT) in the attacker address or victim address, the MC throws an error."Error - Attacker Start address is invalid"Is this a known bug?Thanks in advanceM

Pls see attached file...1 deployed a new sensor after signature update disk space shows 96 & 97% usage is this a normal result right after the update ?2 tried both VMS & IEV but no real-time event shows nor sensor cli show eventsAny idea ? TIA

I have a pix running 7.0.2 and multicast routing.When I configure only one RP, all things go fine. Indeed, all suscribers see the mroutes as well as pix.So, if I configure several rp for several multicast group, nothing is working. Pix can not see an...

Anyone have any basic gotchas?

Good Morning,I have 6 4250XL IDS sensors. I am using VMS1.2 to manage them. I have them all upgraded and added to the IDS MC. I have int3 and int4 added to Group 0. The interfaces are in a up state but the link status is down on all sensors. I have ...

Hi,May I create new template to reporting in Security Monitor 2.1?I want to create a report with specific data fields.

Hello,can you add a quad-card like a IDS-4FE-INT to a 4255? The 4250 is EOS and we need more than the builtin 4 ports.