Network Security

Many thanks to the guys at the SANS Internet storms centre for this “heads up” on this one. Is there a Cisco signature that identifies the vulnerability for this exploit? www.computerterrorism.com/research/ie/ct21-11-2005Original Reference: http://is...

dns_inside----pix-----userdns is at the inside subnetuser is on the dmzdomain controller on the inside subnetobservations;1. with nat (inside) 0 0 , the user could logon to the domain, but couldnt brouse any machine on the inside.2. with nat (inside)...

HiWhere can I find the full signature list in IDS 4215 and their enable/disable status?I tried http://www.cisco.com/cgi-bin/front.x/ipsalerts/idsAllList.pl?CUR_PAGE=2But I cant send the info to the customer since it requires login and it does not sho...

Dear All,I'm trying a PIX' configuration where inside address is 192.168.1.1 but in the same LAN will be public addressess.Please, which commands are needed in order to "move" those public addr. to the outside (route and nat I suppose). Regards Alber...

I get the following error when I try to open an ip log [created by changing the event action to log packets]."The capture file appears to be damaged or corrupt".Is this a known issue?

I have a PIX 515 in Active\Passive failover on PIX 7.0(2). I have disabled monitoring of several interfaces with the "no monitor-interface" command as they are not in use. When checking failover on secondary firewall all interfaces are being monitore...

I've read the 5500's do not support VPNs whilst in multiple context mode - Are there any workarounds for this?

I want to setup my PIX so I can VPN into the PIX and gain access to internal network resources. We have an odd set up as there are 3 interfaces on the PIX. Inside, Outside and VPN.We just added the VPN ethernet card to the pix.Right now, our inside i...

I am trying to use the Auto Update Server to update my firewalls, but it is not working. When my pix 501 tries to get its updates I get the following error in the 501's log: Error 612003 Auto Update failed to contact: https://10.10.5.6/autoupdate/Aut...

Good MorningCan Cisco tell me if signature S202 is out yet for v4.1 and v5 ? S201 was sent out on Nov 8th.Any update is appreciated.Regards,David

What is the CLI syntax to not include an IPS signature. Like I want to remove the 2001 sig from the built-in.sdf

Can anyone tell me if VMS 2.2 supports the management of IPS 4255 running 5 code, according to the documents it does not explicitely state that it does.

Hi,We are using PIX 7.0.4 and Our dhcp server was located on outside. I could configure the dhcp server address. However, I found that dhcprelay can be only enabled on physical interface but not vlan (tagged) interface.Is it PIX-OS bug ?Do this probl...

HiCan anyone confirm that the ASA can do network anti-virus scanning?If so what models do it and how much does the performance suffer?Darren