Network Security

Hello,I have one vpn concentrator 3030 supporting pptp connections with radius authentication (radiator).I put the service online and all working fine at the beggining (the first 2 ou 3 hours), with some users to authenticate and using the service. A...

We have a Checkpoint NG FP2 firewall with several VPN tunnels coming into it, all work fine except for two, which connect to PIX 501s.All seems to work OK, however after a period of inactivity (normally overnight) they are unable to access HTTP throu...

The PoC code is out in the public -- when can we expect a Cisco sig? Theres apparently a trojan kit being propagated as well.-wP!

I have a PIX 506E and I have it attached to a cable modem and had it configured to use an IAS server for authentication as documented. It was working fine until I switched my IP Addresses from my provider and now I can get out to the Internet and can...

Hello, We are running a VMS server that is receiving SYSLOG and IDS alerts from 5 sensors and 4 PIX firewalls. Both VMS and the sensors are running the latest code releases. The rate of received alarms is not high at all, around 5-20 per min. However...

Hi,My organisation uses a Cisco IDS 4215 which i always update from ciscoworks VMS 1.0.3. However, on applying the last update (IDS-sig.4.1.4-S137), it only update the sensor but failed to update the MC. Futhermore, when i telnet to the sensor i coul...

I am running OS 6.4(3) on a PIX 515e, with 64MB RAM. Windows XP Workstations behind the firewall, Oracle Server in front. Browser on workstation using port TCP: 8006 cannot hit server. Does the PIX have any issues with this port? I know very litt...

Can anyone refresh my memory on the command to show the current user license utilization on a pix 501? is there such a thing?

I've set up a small lab PIX515E(inside interace) and PC connected to the same switch on my desk.The PIX (outside interface) is connected to another switch which has access to a router. Of course IP addresses have been changed to protect the Innocent ...

I'm attempting to authenticate VPN client users thru our 3000 VPN server, and using our Steel-Belted Radius server to authenticate (it further authenticates to a Secure-ID server). I've defined a local group and added what I THOUGHT were all the nece...

Hi To allexcuse me i try to explain my network.we have 5 wireless access point beetween 5 zone( main zone is zone0) and my firewall is in zone0.we want deny bad access from each zone to other zone.i create vlan and zone0,zone1,zone2,zone3,zone4,zonef...

This may be an easy question but I am new to the IDS sensors and cannot find an answer to it yet. Are the IDS signature updates that you get all-inclusive or do they need to be applied sequentially?Thanks, Justin Loucks

What is the best way and recommended way to create an ACL to deny incoming traffic from certain internet hosts? (Spammers, Malwares, etc)Create a network-group and add their IPs to that group one at a time. Deny this group from the outside interface?...

I'm going to have a pix with two "outside facing" interfaces, and two "inside facing" networks. Both outside interfaces have paths to the internet. Lets call the interfaces:'Outside1Outside2Inside1Inside2I need to be able to set up the pix so that ...

dear TS,i've grab traffif on my pix 515 using mrtg, but when i run this command "/usr/bin/cfgmaker --output=/etc/mrtg/pix.cfg --ifref=descr --global 'workdir: /home/rhiez/tools' --global 'options[_]: growright,bits' idc@212.x.x.10", I got error pr...