Network Security

Folks, I have a VMS server and i would like to RDP into in. But, please because of strict default policy i am unable to do it, could sometime guide me as to how to open up rule for me to RDP into it. Thanks,

In CLI mode version 5.x, we run "packet capture" command to capture xx packets of an x.x.x.x IP address. Logon to service, searching thought directories but could not find the file that packet capture created. Please advise file name and directory t...

Installed 12.3.14T2 (advanced security) on 2811 router with new VMS update to the IDS Management Center (2.1) to support IOS IPS SDEE event monitoring. When I configure a specific signature, there is no option to shun. Only alert, block or reset. Whe...

I have a game application using tcp 2000 port. I have captured packets during connection.Client to Server -- TCP -- 1115 -> 2000 syn seq=0, ack=0Server to Client -- TCP -- 2000 -> 1115Syn ack seq=0,ack=1Client to Server -- TCP -- 1115 -> 2000ACK seq=...

I have a pix 501. Currently I have a server inside the firewall that has a static NAT address and access-list defined for port 80. Users outside the network are able to access this ip fine.However when other users inside the firewall attempt to acces...

Hi everyone,There is an inherited limitation on the number of span ports on the Cisco switches. this limit is 2 local span port and 64 rspan.There is a work around to expand that using Virtual Span to increase the numbre of desination port.In my setu...

any help is greatly appreciated. i have 2 pix 535 firewalls. neither have been configured yet. one has a UR license the other a FO license. both came with the 6.3(4) code. i would like to upgrade them to the 7.0 code. can i upgrade each seperat...

I have a 4215 IPS patched to 5.01 ( will be 5.5 today) latest sig level that will not import into the IPS MC ( mc ver is 2.1 patched to 5.5 latest as of last night) import fails and I get the message in the audit log "error importing configuration ...

Hello !I had CSA MC 4.0.3.736 installed when my VMS crashed. More then 60 agents (.723 and .736) are deployed on our machines. I had to reinstall all VMS including CSA MC which is now 4.5.1. My question is what has to be done on server to reconnect ...

I have a pair of PIX 525 that were doing failover with v6.3.2 code, but today I've upgraded to v7.02.The failover interface are up and I can ping the failover ip addresses but the 2 won't communicate. One is a PIX 525 UR and the other is a PIX 525 FO...

Hello,We have a problem regarding signature 6066. We got immens numbers of false-positives. The description of that signature tells:This signature fires upon detecting an excessively large number of DNS TXT record lookups originating from a single so...

For a remote PC (VPN Client) to access to the inside of the Pix firewall, I'll issue a CML: http 10.10.10.0 255.255.255.0 inside Now, I want to reverse the above command, i.e. to disable the Remote access to the inside of the Pix. What is the command...

Hi,I have pix 515E for some reason I can't ping non interfaces nor inside to outside and nor outside to inside. any suggestions?Help needed

The NSDB does not carry a signature description for:Sig Name: Web View Script Injection VulnerabilitySig ID: 5639Severity: HighSig Version: S195Attack Type: Command ExecutionOS Family: WindowsOS: General WindowsProtocol: IPProtocol Details: General T...

Good day all, I want to upgrade my 4255 platform to 5.0. I am currently running version 4.1.5 S189. Disk space in root/ 73% used and apperently this is not sufficient to accept the upgrade. I have remove old pkg files,events gz, scripts, ...The fault...