Network Security

Is there a document that compares the performance characteristics of the IPS 4200 appliances with the IDSM's and the ASA appliances?i.e. Trying to determine where it makes the most sense to use an integrated appliance and where the decision point exi...

Hello,We're trying to make a PPTP connection with a Pix 506 (6.3.5), and a Pocket PC Windows CE based appliance.We've done the Pix banal configuration (attached) and tested it with a Windows XP workastation: all worked well.But, when we try to use th...

Hi everyoneI use a PIX 501 as a VPN Concentrator for a few remote workers. This has been working fine, but for some reason it has become unstable over the last few weeksThe PIX becomes unstable, and cannot be pinged either internally or connected to ...

We want to monitor our AES-256 VPN tunnels for our environment using CiscoWorks VMS 2.3. Our AES-256 VPN peers is a VPN concentrator with multiple PIX firewalls to our remote sites(hub and spoke design). Will CiscoWorks VMS 2.3 support this archite...

Any recommendations for PIX 7.x - HTTP Inspection for the following:Maximum URi LengthMaximum Header Length (and response)Body Length (min/max)RFC Request methods (what to allow/block)Extension Request method. etcThanks

Checking it on 4240 I configured about 70 entries and the sensor refused to take any more. Is it a physical limit or a bug?Regards,Krzysztof

In my network, there is one server that is on an untrusted network. i have a firewall between that server and my network. I only want to allow that server to send data to a server on my network, and deny all other access.is this option possible in th...

All,I have a customer with a PIX515 with a DMZ interface, and I set up the 4215 IPS 5.0(5) to be inline between the PIX and the DMZ switch and between the PIX and the internal switch.In this configuration, traffic that traverses only one of the two i...

This morning I wanted to create a new report in the security monitor of our vms 2.2 server.I selected reports and the definitions> create > ids alarms report and then proceeded to the try select some specific signatures from the ids signature dropdow...

I know on a router I can copy the software currently stored on the router's flash to my TFTP server by using the command copy flash tftp.But is it possible to copy the software thats currently on my PIX to a TFTP server? If so, what are the commands...

Hi, Pls find the attached diagram. the requirement is: 1. inside servers should ping pix inside,dmz,outside interface. 2.the server in pix dmz should be able to ping pix dmz,inside,outside interface and all servers inside. 3. from ISA i should be abl...

I Installed Cisco VPN client 4.0.3(F) to make connection to University. This solution worked fine.Then I installed Sygate Personal Firewall Pro 5.5 newest build and VPN doesn't work anymore.Now Cisco VPN client says when connecting to UNI that firewa...

Having a odd connectivity problem behind a PIX 501. I have clients that connect just fine and can ping places behind the firewall, 192.168.1.4. I have another one that cannot ping anything behind the firewall. One odd thing is that the routing tab...

I do not believe I can do this, but need to ask anyway, I have a set of Pix 515e in Active/Standby, and will have a HA pair of Proxy Servers behind the Pix, directly connected. So I have 2 interfaces on each Pix Inside 2 Inside 3. Inside 2 goes to Pr...

Hi all,I'm trying to reinstall the MC for CSA, but I receive this error all the time.I have already tried to reinstall the SQL MSDE but nothing change.Anyone know what I could do?Thanks in advance