Network Security

How do you encrypt NetFlows through a VPN connection? I've set the netflow destination to be on a network that is represented by interesting traffic. I've also set the source of the netflow to be on the local network (interesting). The source is V...

Hi,I have just upgraded my pix from version 6.3 to 7.0.4 and the ospf is stuck in EXSTARTThe pix outside interface is in a lan with my 2 edge router. Here the output from a debug made on a routerJan 4 09:48:48: OSPF: First DBD and we are not SLAVEJa...

I hope you folks don't mind all these questions - I do do a lot of searching and reading and only ask if I can't find an appropriate answer.This may not even be a PIX question but my gut tells me I am missing something. I have the PIX assigning addre...

I have a PIX 515 that I wish to allow HTTP requests through to an internal webserver. However as much as I've tried I cannot get this to work.I have an external WAN IP assigned by my ISP through DHCP and an internal web server at 192.168.1.150.My con...

I am now implementing Network Admission control with Symantec Client Security, I would ask if Symantec Posture Plug-in collect Symantec Agent attributes for Service Pack and OS and send it to Cisco Access Control Server 3.3, I am adding the Symantec...

I found the EOL/EOS for the IDS 4.x Sensor Software. Looks like we'll be getting signature updates untill 9/29/06. Now WHY wasn't this very important information emailed to everyone who has IDS noticifations on in their profile? http://www.cisco.com/...

Hello,I just bought a new PIX501 to replace an existing linksys NAT box. Behind the NAT box, I run ServU ftp and it's is configured to run passive mode in port range 60000 to 60040. Now, i want to configure the PIX to take care of ftp passive mode, i...

Hello, Our company has purchased couple of IPS 4240 and they are lying in the lab for couple of days. I started working on them to get a feel of IPS. It has 4.1 Device Manager and looks like the latest is 5.x. 1. I see VMS, IDM(Device Manager, SDM,et...

I have a brand new PIX-515E, which was delivered with R7.X. Nevertheless, I have to downgrade the pix to R6.3.This seems to be a problem, because with the downgrade command I have to enter a 4-tuple activation key. But I do not have one, because I´am...

Based on bleeding snort sid, this is what I've got, but it doesn't seem to be working:wmf exploit file:\x01\x00\x09\x00\x00\x03.{10}\x00\x00.{0, 5000}\x26\x06\x09\x00

Hi All,I facing a problem on pix firewall, when I configure and start using the firewall, it work fine. But after 20 minutes using, it disconnected. But modem still functioning when I by pass the firewall.I attach the config file, please help.

HiRecently I have installed ASA 5520 with ASA-SSM-20 module.I can view the event alerts but I have following questions1. Can I get the alerts from ASA-SSM module to my syslog or any other monitoring tool 2. I can monitor the event alerts from ASDM b...

What is the best way to capture packets as well as display them for signatures.I need to see the packets that cuase the ICMP hard DoS sig 2157 to fire. From the Cisco IDS Install and Configuration guide version 4.x it talks about enabling packet capt...

Can I upgrade IDS 4.0 to IPS. If so, pls tell me what procedure i have to follow.