Network Security

I have a question about putting mail server behind inside interface using static command. It seems like works fine. However, I get "incomplete" message when I looked at PDM config since I put access rule sourcing and destination on the same interface...

HiWhile trying to upgrade IDS 4235 (Version 4.1(1)S47) using FTP or IDM, it gives "Error: exp timeout" message. What could be the reason?If the FTP server is a Windows XP machine, and the signature/service pack file is in C:\Inetpub\ftproot, what is ...

I am using ipsmc 2.2 on CiscoWorks VMS server and whilst in the 4.X signature configuration engine, if I try to open any of the parameters for sting.tcp engine I receive the following error:“Object loading failed. An error occurred while trying to lo...

Is it possible to pass RealPlayer/UDP traffic thru the PIX firewall with only PAT configured?If not, is it possible to pass a single GRE or IPinIP tunnel thru the PIX with only PAT configured?

Is there a command to clear active IPSEC or PPTP tunnels from the PIX?

Hi all,We have a 515E running Fos 7 .We need to configure the pix to log to two hosts with different trap levels.ie to host A on trap info and host B on trap warning...why this is required is Host B is behind a low bandwidth pipe .Any pointers apprec...

Hi,I'm trying to implement truted connection feature for my NAC project. I use VirusScan Entreprise v 7.1. And it is required to download Common Management Agent v 3.5. I have two question :1. I would like to know if somebody knows how to get that ag...

Per my previous post ---[In a full "Nat 0" envrionment with the PIX Functioning as an VLAN ACL Filter]*) When a packet gets blocked by the default ASA policy -- that of a packet with a source in a lower security level traveling to a higher security l...

The Archived Pruning files from the VMS Event database contain the alerts that are pruned to keep the database a reasonable size. Each time pruning occurs a new directory is created, named after the date/time of creation such as:01012006_061416Within...

I noticed that the S214 signature upgrade contains a couple 5.1 only signatures (see below)? Given all the problems customers are having with this release, and Cisco's troubleshooting efforts being limited to "rebuild as 5.0", this is quite insulting...

I have a question for you who are already using the IPS signatures to block traffic. When you started setting up these signatures what guidlines did you use? I'm trying to develop a strategy for my company's activating of signatures.

Hi! I have two ASA 5520 with AIP-SSM Module. I have configured stateful failover and I `ve got two questions. 1. When I power off the primary failover unit I loose contact with the firewall about 10 seconds,(I don`t think this is normal when you use ...

Is it possible to capture and log all traffic going in and out of our PIX 515E firewall

I am taking over management of a MARS running 3.4 code. There are 102 system inspection rules, no user inspection rules, and no drop rules. How many are there by default? This doesn't seem like very many, at least compared to another vendor's system ...

Hello,I've bought a 4215 IDS (2 interfaces) with the 4.1 image some years ago. I want to use it in inline mode. I will buy a 4FE card and an upgrade for the image to the latest version. My question is if there is any posibility to use a pair of inter...