Network Security

I have a game application using tcp 2000 port. I have captured packets during connection.Client to Server -- TCP -- 1115 -> 2000 syn seq=0, ack=0Server to Client -- TCP -- 2000 -> 1115Syn ack seq=0,ack=1Client to Server -- TCP -- 1115 -> 2000ACK seq=...

I have a pix 501. Currently I have a server inside the firewall that has a static NAT address and access-list defined for port 80. Users outside the network are able to access this ip fine.However when other users inside the firewall attempt to acces...

Hi everyone,There is an inherited limitation on the number of span ports on the Cisco switches. this limit is 2 local span port and 64 rspan.There is a work around to expand that using Virtual Span to increase the numbre of desination port.In my setu...

any help is greatly appreciated. i have 2 pix 535 firewalls. neither have been configured yet. one has a UR license the other a FO license. both came with the 6.3(4) code. i would like to upgrade them to the 7.0 code. can i upgrade each seperat...

I have a 4215 IPS patched to 5.01 ( will be 5.5 today) latest sig level that will not import into the IPS MC ( mc ver is 2.1 patched to 5.5 latest as of last night) import fails and I get the message in the audit log "error importing configuration ...

Hello !I had CSA MC 4.0.3.736 installed when my VMS crashed. More then 60 agents (.723 and .736) are deployed on our machines. I had to reinstall all VMS including CSA MC which is now 4.5.1. My question is what has to be done on server to reconnect ...

I have a pair of PIX 525 that were doing failover with v6.3.2 code, but today I've upgraded to v7.02.The failover interface are up and I can ping the failover ip addresses but the 2 won't communicate. One is a PIX 525 UR and the other is a PIX 525 FO...

Hello,We have a problem regarding signature 6066. We got immens numbers of false-positives. The description of that signature tells:This signature fires upon detecting an excessively large number of DNS TXT record lookups originating from a single so...

For a remote PC (VPN Client) to access to the inside of the Pix firewall, I'll issue a CML: http 10.10.10.0 255.255.255.0 inside Now, I want to reverse the above command, i.e. to disable the Remote access to the inside of the Pix. What is the command...

Hi,I have pix 515E for some reason I can't ping non interfaces nor inside to outside and nor outside to inside. any suggestions?Help needed

The NSDB does not carry a signature description for:Sig Name: Web View Script Injection VulnerabilitySig ID: 5639Severity: HighSig Version: S195Attack Type: Command ExecutionOS Family: WindowsOS: General WindowsProtocol: IPProtocol Details: General T...

Good day all, I want to upgrade my 4255 platform to 5.0. I am currently running version 4.1.5 S189. Disk space in root/ 73% used and apperently this is not sufficient to accept the upgrade. I have remove old pkg files,events gz, scripts, ...The fault...

I have a couple of questions regarding the ASA that deal with the SSM module. I have read the document "Configuring ASA-SSM" and am confused by the command logic. I realize that you need to specify a service-policy globally that defines the traffic b...

I'm having difficulty restoring an image to the PIX from my tftp server. Please see the commands and screen output below...csbhugoton(config)# write net 172.10.1.57:csbpixoldBuilding configuration...TFTP write 'csbpixold' at 172.10.1.57 on interface ...

I need to re-image a 4215 4.1(4) sensor and I dont have a recovery cd. How should I move forward with this? Please advise - and thank you!