Network Security

Sig 4058 subsig 1 (IDS Signature UPnP LOCATION Overflow) was triggered on one of our sensors as what appears to me to be a false positive. From what I understand, the sig fires on a payload of 116 characters or more to service port 5000 TCP. The des...

I want to block all traffic from an IP range. What would be the best way to do this? We have a pix 520 running 6.3(3).

Hi Friends,Can you help me to solve an issue? I need recovery one PIX Firewall from erroneos upgrade, my client upgrade his PIX 515E from version 6.1.4 to 7.0 without taking correct procedure. So, now there is a problem. The PIX bootup with 7.0 versi...

Dear All,I want to upgrade pix 520 software from 5.1 to 6.3.Pls let me know the required things to this jobThanksswamy

Hi,I have PIX 515e with OS 6.3(4) and I have one outside and two inside networks.right now I have these settings (config excerpt):...nameif ethernet0 outside security0nameif ethernet1 inside security100nameif ethernet2 half security50...access-list i...

Does the IPS have to be connected back-to-back with a cross-over cable with the firewall in Inline-mode, since it looks like we are not assigning any IP addresses to the sensor interfaces??

Hello, I have problem with MTU via L2TP multihop. Has anyone information what is sequence of operation, when tunnel switching is provided ? (when packet is switched into second tunnel, is compared with MTU before or after L2TP encapsulation) ?Thanks ...

I've found that I need the correct licence/liecences to do failover. However, I can't find out how to check if we already have the correct licences and how to GET the upgraded licence if not.

I have configured bandwidth reservation in my routersMy probelm is I am not getting any hits on the access-lists Eventhough data traffic is there as per the access-list and in the show policy-map interface output not seeing any packet count.This is m...

Does Cisco have any recommendations on putting CTA on servers and using NAC?This is more in anticipation of NAC on switches. If you have good physical security over how servers connect to and disconnect from a switch, and you have good control over s...

Senario:Note: Squid proxy at DMZ of PIX (single legged).Inside LAN: 192.168.22.0 /24DMZ : 172.16.10.0 /24How to go ahead to configure PIX acl to forward all http, https, ftp traffic iniated from inside LAN to Internet?eg.access-list dmz_in perm...

We have a number of 2821 routers that I have in VMS as IDS devices. When I try to upgrade the signatures with the IOS IPS zip file I get an error message that says the file is not recognized as a signature update. Are there any examples of how to upd...

Hi,We want to upgrade one of our pix to support version 7.0. In order to do so, we need to upgrade the mem to 128Mb (as this is an unrestricted). Unfortunatelly, the two mem slots are full (2x32mB). Did someone know what the PIX-515-MEM-128 contain? ...

I've got 7206 IP/FW/IDS 12.3(11)T3The very strange problem: 1) half of SMTP trafic does not flow from Internet to my inside SMTP server (public address) Though I turned all signatures off except HTTP block2) inside FTP clients can not get some files...