Network Security

I think that I am see large amounts of events from the signature Nachi Worm ICMP Echo Request (ID: 2156.0) signature that could be misleading in the process of identifying really infected devices. When I check the destination it is usually a landes...

CISCO 800 IOS 12.3Hi, I have several VPNs set up between my site and the sites of asociates. The original requirements were for me to have two public IPs for this setup, ne which is a real interface (and the tunnel endpoint), and one which is used fo...

We have noticed that when the syslog server becomes unavailable that the pix generates large amounts of ICMP reverse path check errors. Can some one explain why this happens and if it can be prevented. Thanksmarcus

I have a concentrator and trying to tunnel everything fromt the remote site but when I put in 0.0.0.0/255.255.255.255 I ger an error in concentrator

is it possiable to put dns inside DMZ?if so Pls give me some knowledge.Thanks.

Hi All,I've just installed SNMPc (6) and discovered various parts of the network.When Polling the PIX firewalls (running ver 6.3x) the inside interface responds but the DMZ interfaces and the outside interface don't.They are being polled using status...

Hi,What is the difference between FWSM modules of 6500 switch vs PIX firewall hardware.Also can somebody give the PRO's and CON's of both the module when positioning.Which one is better FWSM or PIX firewall.RegardsDeepak

Hi everyone.I generally do NOT do networking, so I may be a bit slow.I'm trying to connect a branch office to a head office with two PIX 501s.I'll need ping, traceroute and all windows packets to traverse the system.The system topology is as follows:...

I have a problem with inside routing on a pix 515. The pix has inside ip 192.168.200.254/24 and is acting default-gate to all nodes on this net. There is also a vpn router on the inside with ip adress 192.168.200.245/24. vpn router has a default rout...

I am only a CCNA student, so please be gental...I am trying to configure a Cisco PIX firewall version 5.3.Here is my current setup:PC <-- x-over cable --> firewall <--- router ----> InternetThe inside interface has an IP of 10.27.164.254, and the out...

There was an emergency notification last night that I want to be sure everyone has seen:1. Emergency IPS Version 5.0(5) Service Pack to be Released on 10/28 to Address CSCsa85330An emergency service pack will be released later today (October 28...

Yesterday I install a new 5.0.2 image on IDSM-2 module and works fine. Then I try to upgrade the maintenance partition to version 3. it's popup a message and looks running and not finish for a long time. So I leave it there and go home. Today morning...

Hello,I have a PIX 501 with two interfaces. I am trying to setup a webserver behind the internal interface.I have a single public IP assigned to the interface.global (outside) 1 interfacenat (inside) 1 0.0.0.0 0.0.0.0 0 0I tried static (inside,outsid...

Upgraded an IDS4210 yesterday from 414s186. Used patch 414h, service pack 415s189, and signature update 415s197.Following updates, it appears some event filters are being ignored... particularly the event filter for sig 1107 (rfc1918 private address...

I'm experiencing troubles in adjusting parameters for this 'Long Http Request' signature (5322). We have a lot of legitimate http traffic with rather long http requests (> 1000 char). So I tried modifying all parameters that have something to do with...