Network Security

There are some signatures that have '********' for a value in certain options. The example I'm working on currently is 5561-0 thru 5561-2, Windows SMTP Overflow. 5561-2 for example has this value for both the regex string and the service ports. What ...

I am considering to deploy ASA5500 for an eterprise who has only one large location for their external data communications through internet. Do I need 4 (8 for resilient) separate ASA5500 boxes to take care of firewall, anit-X, IPS and VPN requiremen...

Hi,I have arunning PIX 506E in my office and to reduce cost. I want to establish a pptp or l2tp VPN betwwen home users and Office .Is this possible with PIX 506E?If yes then How ?Thanks,CK-NET

Hi all, This may seem like a strange question but i just wanted to clarify the Pix behavour for blocking traffic. If you apply your access list to allow port 80/443 and then deny everything else (i know there is an explicit deny but i still like to a...

Starting from 12.3(5) ending with 12.3(17a) on all our 7200 and 7500 routers, applying ip audit input on internal interface or ip audit out on external interface immediately stops all https websites. I was trying to disable all https and http signatu...

Hi,I have a PIX connected to a switch (Inside interface) and to a router (Ouside interface).On the switch, I have somes servers. Each server have an ethernet inferface with a public ip address (on the network 80.64.226.1/24, the first address is my r...

How do I determine the software bundle I have installed on my pix 515e?

It is documented that 2 4250-SX-INT= can be installed into the 4250. I would like to know which of the following combinations are also supported by 4250: 4250-SX-INT= + IDS-TX-INT=, IDS-TX-INT= + IDS-TX-INT=, 4250-SX-INT= + IDS-XL-INT=, IDS-4FE-INT= ...

How can i migrate only the Netconfig Usertemplates from Cisco Works LMS 2.2 to LMS 2.5 ?

Hi;I confirured a tunnel between a cisco pix with ios 6.3 and a Sonicwall that has the lastest ios installed, which is working fine.The problem I'm having is that when I try to add a dynamic vpn configuration to the pix it seems to drop the tunnel af...

We're presently running a PIX 515E on 6.35, with a IDS-4210, and I'm thinking about upgrading to an ASA-5510. Anyone do this, and if so, how do you like it?

I have a PIX 506 running v6.3(1) OS & PDM v3.0(0)141. I have downloaded the upgrades for v6.35 on the PIX and v3.04 for the PDM. When I perform the upgrades on the PIX will I lose all my settings that I have entered in (hosts, VPN settings, access ru...

I just upgraded to PIX 7.04 and am getting a ton of these errors:%PIX-6-106015: Deny TCP (no connection) from 172.22.x.x/58478 to 172.22.x.x/44443 flags RST ACK on interface outsideHere is a session:2005-11-11 08:58:01 Local1.Info 172.22.x.x Nov 11 2...

What's the relationship between inbound interface acl's and application inspection?Do the acl's get processed before the class-map statement creates the traffic class for the inspect command?

Hi, we have a pix 501 firewall for a customer. We've used these with other customers with very little trouble. But this customer needs to be able to access his external IP from within his server because they hardcoded the external IP in their applica...