Network Security

Good day all, I would like to express my concerns with the fact that NSDB seems to now only be accessible through the web. We have used this NSDB on our closed network and cannot use it otherwise..........is it possible to have the full NSDB database...

Hi, I just got my ASA 5520 firewall with (ASA SSM-20 module) couple weeks ago, and I am trying to configure IPS features but I getting this problem:This is output from CLI:-------------Asa5520fw# session 1Opening command session with slot 1.Connected...

Hello,can you please anybody confirm to me, that when active unit went down and the failover cable will be physically disconnected the secondary unit with FO licence will work properly? Is it true that every 24 hours the standalone unit with FO licen...

I don't quite understand the context that is sometimes included with events. The event in particular I was looking at is 5442-0.First of all, what determines whether context is included with an event? The action for this particular signature is "pro...

Hi.I had IPS MC 2.1.0 (Build 123) functioning fine. I installed the idsmdc2.1.0-win-CSCsc336961.tar file in order to solve the CSCsc33696 bug. Next, I installed an update signature for IPS version 5 (But I didn´t has any IPS sensor version 5, I just ...

The sensor is inline and the webserver app has stopped. Also I am unable to create the service account because of an error: setenableAuthenticationtokenstatus: failure setting the account's password. Any ideas?

We have an IDS ver 4.1 in a cat 6k, and initially addressed it in a lab in vlan 1 as such:vlan 1: 161.220.60.1 /24IDS: 161.220.60.10 /24the IDS gateway is Vlan 1 ip. this has worked fine, able to ping and telnet btw. the 6k and the IDS. but in getti...

Hi,I am trying to enable my PIX for IPv6, so that I can connect from my internal LAN into my DMZ. But I run into some problems and I am not sure if I understand the IPv6 inplementation on the PIX correctly.In IPv4 I can create a connection from host ...

Hi All,Does anybody know how ids do tcp reset? in ios IDS, the router can send a reset packet, but in a real IDS, how can the ids tell the router to send a tcp reset packet?? Thank You!Best RegardsTeru Lei

The signature id 5648 (Tomcat Denial of Service Attack) seams to be prone to false positives.... We have seen in a number of incidents, that when the destination of this attack uses the ephemeral port of 8007 with an established connection on TCP por...

Hi,Can we enable VRRP on different VPN 3000 concentrator series?Thanks in advance

PIX 501, 6.3(4). Trying to allow client on inside using Outlook Express to ISP Mail server. I believe Outlook Express uses SMTP to send mail and POP3 to retrieve it. Wondering what sort of config is required as I am not sure if server or client initi...

My pix has three interfaces.one is used to inside interface .The others(two) are used outside interfaces.the two outside interfaces can implement load balance.How can I do. thanks!

i have two pix535 configed for failover. there is a route config(to outside direct port) can't replication. i reload standy pix,and use write standy command ,there also is 'nt the route config. the standby pix's outside port static is"wait",and the r...