Network Security

anyone else seeing false positives on event 3327 after installing sig S190?

We now have multiple outside interfaces - different ISP's. The plan is to have one interface handle all web traffic (we will call that outside1)- the other VPN's (outside2).To handle this - I figured I'd set the default route to use the ISP on outsi...

Does someone know of or has created a script to login to a PIX and reload it without any intervention from the user? I can figure this out with Putty, but I was hoping to find a self contained script that any user can run from anywhere. The user wo...

Hi all,What is the minimum bandwidth required for a single vpn tunnel.Is there anyway to monitor vpn traffic and know the stats for eg total bytes/protocols etc.

I'm currently deploying a new site which includes a pair of PIX 525 in a active/passive failover configuration, they are running software version 7.0(1).The PIX's have 3 network cards, configured as follows:interface Ethernet0 speed 100 duplex full n...

Trying to find out what is the sig id for ICMP Network Sweep without w/Echo, but Cisco Signature website: https://10.1.1.1/vms/nsdb/html/expsig_0.htmlshows: Exploit Signature name of abc123456 and ID:0.Does anyone know if there is a sig id for "ICMP ...

Howdy,Have a PIX 525 running v7.0(2) that is reporting the uptime incorrectly from a show version. ASDM reports the correct uptime, however command line shows the PIX as stuck on 49days 17hours.The only reason I noticed was that Cacti is failing to m...

Anyone can explain why I have two lines in syslog for every connection build or teardown?syslog server is Kiwi and I disabled logging standby.Thank in advance. Alex M.

Hello,When sending job results or reports from the IDS MC (v2.1) I am seeing the FROM: email address coming through as "notifier.hostname" - I seem to recall in the past I was able to change this so that email would have a FROM: formatted as "notifer...

Please feel free to correct me but as I understand policing on the current version of the pix."Policing is applied only in the output direction."So we can only police traffic which is leaving the pix. So in my secenario I have 150 vlans inside my pix...

There's tree in Cat4000(IOS) MIB, that contains list of modules (with model name, s/n etc.). It looks like this (for module model, but the same goes for other info):$ snmpbulkwalk -m /dev/null -t 10 -v 2c -Osqn -Iu vdcs09c -c ******** .1.3.6.1.4.1.9....

Router outside ASA has connections to two providers and I am given a subnet of 16 IPs from each.If I try to configure a second static NAT on the ASA with a different real ip but same inside ip I get 'duplicate NAT etc..' Any ideas ? I need to configu...

I have seen this config in one of the examples in cisco sitepolicy-map mqcp class hub bandwidth 200 police cir 5000000!Please help in understanding the bandwidth and police command setting in this example