Network Security

has anyone seen the below before on a Windows Domain Controller.TESTMODE: The process '<remote application>' (as user NT AUTHORITY\SYSTEM) attempted to access the registry key '\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\ComputerName' and value ''...

Greeting all. I wanted to ask a question regarding information in a CSA 4.5 MC database.When I open the EventListView view, there's a column titled ButtonCode. Typical values are 0-4. Does anyone know what these values mean/represent?Thanks in advanc...

HiI have installed ASA 5520 . It is configured for 4 interface outside, inside wanzone and dmz. The security for inside is 99 and for dmz is 90 . There is a permit ip any on both dmz and inside interface. i have done a nat 0 on inside interface and a...

I have 3mg DSL running client 4.06. I have a very reliable and consistent 2.6mg actual bandwidth. My VPN account is set to terminate after 4 hours of inactivity. The tunnel drops at 5-8 minutes. If I start a continuous ping to an ip on the same L...

When upgrading a pix 506e can you tftp the file through the tunnel from another secure site or does it have to be from the outside?

In a VPN cluster when the exterior interface fails/unreachable the VPN tunnel fails over as designed.Question: Is there a way to configure the interior (lan side) interface as a critical interface (i.e. the the interior interface fails the VPN device...

Many thanks to the guys at the SANS Internet storms centre for this “heads up” on this one. Is there a Cisco signature that identifies the vulnerability for this exploit? www.computerterrorism.com/research/ie/ct21-11-2005Original Reference: http://is...

dns_inside----pix-----userdns is at the inside subnetuser is on the dmzdomain controller on the inside subnetobservations;1. with nat (inside) 0 0 , the user could logon to the domain, but couldnt brouse any machine on the inside.2. with nat (inside)...

HiWhere can I find the full signature list in IDS 4215 and their enable/disable status?I tried http://www.cisco.com/cgi-bin/front.x/ipsalerts/idsAllList.pl?CUR_PAGE=2But I cant send the info to the customer since it requires login and it does not sho...

Dear All,I'm trying a PIX' configuration where inside address is 192.168.1.1 but in the same LAN will be public addressess.Please, which commands are needed in order to "move" those public addr. to the outside (route and nat I suppose). R...

I get the following error when I try to open an ip log [created by changing the event action to log packets]."The capture file appears to be damaged or corrupt".Is this a known issue?

I have a PIX 515 in Active\Passive failover on PIX 7.0(2). I have disabled monitoring of several interfaces with the "no monitor-interface" command as they are not in use. When checking failover on secondary firewall all interfaces are being monito...

I've read the 5500's do not support VPNs whilst in multiple context mode - Are there any workarounds for this?