Network Security

Hi,I am using CSA 4.5. I want to disable and log if some one tries to scan open ports to my Server installed with CSA agent. I want to know the exact rule which will block and log the port scan activity to my server (which will be easily done by NMAP...

Anyone has successfully tried BGP MD5 across PIX 7.0?Despite the static (inside,outside) ..... norandomseq .....The MD5 authentication still failed for both platform 525 and 515 running 7.0.1Without MD5 is the BGP peering can formed.

Hello,We have sensors that are physically located at many remote sites with no human on site. They are running IDS Version 4.x, please advise is there a command or way to find the serial number without flying to the remote sites.Thanks,Simone.

Dear All,I have a few questions which related to access list.1) I have one content filter server in dmz network. I want few machines to connect content filter server but I want to block the rest of the machines denied access to that server.2) I want ...

I am having troubles in getting passive ftp to work through my pix. I have no troubles with normal ftp but the second I try to use passive ftp the connection never gets established. Is there something else that I need to add into my config below for ...

Hi,I am new to PIX.Pls find the attached setup diagram and configuration.Customer using ADSL modem and ISP have given two IP address(200.a.b.c for mail.xyz.com) and 200.x.y.z public IP on PIX external interface for outgoing traffic.The customer has i...

After upgrading to PIX OS 7 I am getting following error message from all my internal hosts. It is rapidly repeating.%PIX-3-710003: UDP access denied by ACL from 192.168.105.62/138 to inside:192.168.105.255/138

I've seen this configuration on CCO and I'm not sure what it means. static (inside, outside) 10.1.1.1 10.1.1.1.Note: The same IP is used for both the public and private address. In what scenario would this be used and what specifically does it accomp...

I have purchased a smartnet agreement for my PIX 501 in January, 2005. I currently have the installed software 6.3.1 that came with PIX. What is the most current version available for the 501, and how do I get it from Cisco. Any help at all will be g...

We are seeing a very large number of these signatures firing and I'm wondering if anyone has identified legitimate MS traffic as triggering this alert.....

I'm a bit new to the IDS/IPS world but we have just received two 4250-XLs and I was going to use the ethernet monitor port but it simply won't let me. Reading the literature online it looks like this port is not useable as a monitoring port in the XL...

I recently had a vulnerability scan completed and "SSH protocol versions supported" showed up in it for my IDS. Has anyone come across this and if so, how am I able to mitigate it. Is there a way to change the SSH version on the device?

Hi,Has anyone come across this situation? I issued a "reset" command and proceded to reboot the sensor. Sensor never came back up. I then console cabled into the sensor and while the sensor was trying to load it would stop and reboot. This kept happe...

Does pix os 7 support WebVPN?Thanks,

We have approximately 63 sensors (IDS 4235's all running v4.1)) on our management network that monitor our network. We use the CiscoWorks Management Center to push our sig updates. We usually:1. load the ZIP file for the updates in the proper directo...