Network Security

I need to configure one firewall to run OSPF using only a single interface. I need to configure a second PIX 515 supporting OSPF over 5 interfaces including the outside interface. How do I block routing updates from leaving my private network out my ...

I have a question about putting mail server behind inside interface using static command. It seems like works fine. However, I get "incomplete" message when I looked at PDM config since I put access rule sourcing and destination on the same interface...

HiWhile trying to upgrade IDS 4235 (Version 4.1(1)S47) using FTP or IDM, it gives "Error: exp timeout" message. What could be the reason?If the FTP server is a Windows XP machine, and the signature/service pack file is in C:\Inetpub\ftproot, what is ...

I am using ipsmc 2.2 on CiscoWorks VMS server and whilst in the 4.X signature configuration engine, if I try to open any of the parameters for sting.tcp engine I receive the following error:“Object loading failed. An error occurred while trying to lo...

Is it possible to pass RealPlayer/UDP traffic thru the PIX firewall with only PAT configured?If not, is it possible to pass a single GRE or IPinIP tunnel thru the PIX with only PAT configured?

Is there a command to clear active IPSEC or PPTP tunnels from the PIX?

Hi all,We have a 515E running Fos 7 .We need to configure the pix to log to two hosts with different trap levels.ie to host A on trap info and host B on trap warning...why this is required is Host B is behind a low bandwidth pipe .Any pointers apprec...

Hi,I'm trying to implement truted connection feature for my NAC project. I use VirusScan Entreprise v 7.1. And it is required to download Common Management Agent v 3.5. I have two question :1. I would like to know if somebody knows how to get that ag...

Per my previous post ---[In a full "Nat 0" envrionment with the PIX Functioning as an VLAN ACL Filter]*) When a packet gets blocked by the default ASA policy -- that of a packet with a source in a lower security level traveling to a higher security l...

The Archived Pruning files from the VMS Event database contain the alerts that are pruned to keep the database a reasonable size. Each time pruning occurs a new directory is created, named after the date/time of creation such as:01012006_061416Within...

I noticed that the S214 signature upgrade contains a couple 5.1 only signatures (see below)? Given all the problems customers are having with this release, and Cisco's troubleshooting efforts being limited to "rebuild as 5.0", this is quite insulting...

I have a question for you who are already using the IPS signatures to block traffic. When you started setting up these signatures what guidlines did you use? I'm trying to develop a strategy for my company's activating of signatures.

Hi! I have two ASA 5520 with AIP-SSM Module. I have configured stateful failover and I `ve got two questions. 1. When I power off the primary failover unit I loose contact with the firewall about 10 seconds,(I don`t think this is normal when you use ...

Is it possible to capture and log all traffic going in and out of our PIX 515E firewall