Network Security

Will 'sh conf' output of the 5.0 code list all enabled signatures or just those tuned ones?

Hi AllWe're looking into purchasing an IDS/IPS appliance, but am concerned about thruput and perf issues. We don't have the budget to stretch to the multiGigabit models to monitor multiple points on our gigabit backbone and network in addition to doi...

The title says it all.

The attached file is the config on a new PIX 501. The inbound translation works but there is no outbound access. The routing and ip scheme is identical to the firewall that it is to replace. Can you see the problem ?

I have tried in vain to set this firewall up right so that i can get on the internet but have so far failed. It is replacing an old Symantec Firewall which had the settings i thought i would need in. I have put the settings into this firewall but i...

I have a PIX 501 in Denmark. A VPN concentrator in the UK and the US.I have a LAN IPSEC tunnel from the UK to Denmark and from the UK to the USA.From the UK I can connect to Denmark and to the USA, but I cannot connect from Denmark to the USA (via th...

Where can I download a evaluation copy of CSA

Hello all,I am trying to configure "manual blocking" on the IDS sensor to block some hosts and networks. PIX is able to shun the hosts but not the networks. The "show shun" command shows only the hosts that are shunned and does not show any "networks...

We have a vpn box at our business, installed over 3 yrs ago. It is working fine, except that some latops are not able to connect to the vpn box through the vpn software. Is there an upgrade of that software? Please help.

I'm trying to update my IDSM2 sensor version 4.1(4)S172 to IPS 5.0. I've already downloaded the appropriate file file 5.0(1)S149 major update. But when I enter the commands to upgrade the sensor version, it says:# upgrade ftp://<my ftp ip>/IPS-K9-maj...

I have just got a PIX 506E and i turned off the DHCP server for the inside address and assigned it an ip of 125.0.0.57 and a subnet mask of 255.255.0.0 so it can work on the network. However i might have typed the subnet mask in wrong as i can no lo...

It seems like whenever there is an IDS sensor/appliance update for defending against the latest virus/worm but there is no update for IOS IPS signatures.Case in point - on June 3 there was an IDS update for W32/Bobax.worm.o S174. The IOS IPS zip fil...

hi,our internet line to internet is all day at 100% trafic on outside interface /somebody is downloading some big files/. can I find out who is it? I tried set up log, syslog /kiwi/, etc., but there are too many messages.I need find out WHO is downlo...