Network Security

Is there any way to resolve the reported IP address in a signature that fired into a hostname? Here's the background as to why:We have a customer with a custom signature. We have a list of authorized devices which basically tells us not to sound the ...

Hi,Recently when we have tried to log into our Cisco PIX 506E firewall from newer work stations using the web interface, we have gotten this error;exception: java.security.AccessControlException: access denied (jave.util.propertyPermission java.versi...

Hi, I'm hoping that I can ask a question here about the IPS function built into the AdvSec versions of IOS?I have experimented with implementing the default signature set on 3845's (12.4 mainline, 1GB dram) - and it works well; but the CPU utilizatio...

does anyone have any idea what a QM FSM error is on a VPN concentrator.. been looking around to find the error description but with no luck.

Hello, One of the many problems we have had with our recent upgrade to VMS 2.3/IPS 5.1 is now we are unable to push out signature updates to the 5.1 senors (The updates to 4.x work fine). The error we are getting seems to be related to VMS:Local MC: ...

Can anyone tell me why PIX's must specify interface name to route?PIX:route outside 0.0.0.0 0.0.0.0 203.1.1.2 1ROUTER:ip route 0.0.0.0 0.0.0.0 203.1.1.2

I don't see the usefulness of the logging class command and what it gives compared to logging list command ;if somebody could clarify , thanks in advance

Hello, I hope that you guys can help me out here. Currently I am trying to get FTP access to a machine from inside my DMZ from our private network via the external network. I have set up static commands for a number of machines that will be put into ...

Firewall had blocked access to the internal IP address which was mapped with a public IP address. This occured after I tried connecting the server directly to the public IP address bypassing the pix. static (inside,outside) 70.45.5.8 192.168.0.145 25...

My customer has a 1711 router and he'd like to enable IPS on it. It's going to be upgraded to 12.4(4)T, which contains over 1000 signatures.However, I checked in the 1711 datasheet and it says 1711 can only monitor 100 IDS signatures.What I would lik...

Attached is my network design of the PIX and the IPS in promiscuous mode (non-inline). It doesn't look sound:1. Is it possible to set up the IPS in non-inline mode with two sensors? 2. Can the IPS direct blocking commands to the PIX through the Deskt...

Is it possible to filter and block packets based on TTL using the IDS feature set on a 2611 router? I'm a small ISP, and I'm looking for a way to prevent people from using ICS or routers to share their connections.MikeCCNA

Client has non Cisco environment. Foundry and Nortel on the Edge w/Siemens IP Phones. Likes what he sees but not sure of interoperability in this environment. Comments?