Network Security

Hi all, We have a little problem with using alias command. The DNS packet come back with udp error after we apply alias. Although I checked that the packet IP has been changed to what we want. The most wonderful stuff is some of the domain name works...

I have to migrate a Firewall concept from Checkpoint platform to Cisco PIX or FWSM platform.There are some rules for FTP -> only ftp-get implemented today.How can i handle this FTP-GET restriction on PIX or FWSM accesslists ?I only found accesslist c...

I have just purchased a Cisco IPS 4240 and have it up and running. Have been using the IEV to view IPS information and that works ok. The VMS 2.2 that came included with the IPS will not work with the current Cisco works (LMS 2.5) installation that w...

Folks, I have a VMS server and i would like to RDP into in. But, please because of strict default policy i am unable to do it, could sometime guide me as to how to open up rule for me to RDP into it. Thanks,

In CLI mode version 5.x, we run "packet capture" command to capture xx packets of an x.x.x.x IP address. Logon to service, searching thought directories but could not find the file that packet capture created. Please advise file name and directory th...

Installed 12.3.14T2 (advanced security) on 2811 router with new VMS update to the IDS Management Center (2.1) to support IOS IPS SDEE event monitoring. When I configure a specific signature, there is no option to shun. Only alert, block or reset. Whe...

I have a game application using tcp 2000 port. I have captured packets during connection.Client to Server -- TCP -- 1115 -> 2000 syn seq=0, ack=0Server to Client -- TCP -- 2000 -> 1115Syn ack seq=0,ack=1Client to Server -- TCP -- 1115 -> 2000ACK seq=...

I have a pix 501. Currently I have a server inside the firewall that has a static NAT address and access-list defined for port 80. Users outside the network are able to access this ip fine.However when other users inside the firewall attempt to acces...

Hi everyone,There is an inherited limitation on the number of span ports on the Cisco switches. this limit is 2 local span port and 64 rspan.There is a work around to expand that using Virtual Span to increase the numbre of desination port.In my setu...

any help is greatly appreciated. i have 2 pix 535 firewalls. neither have been configured yet. one has a UR license the other a FO license. both came with the 6.3(4) code. i would like to upgrade them to the 7.0 code. can i upgrade each seperately or...

I have a 4215 IPS patched to 5.01 ( will be 5.5 today) latest sig level that will not import into the IPS MC ( mc ver is 2.1 patched to 5.5 latest as of last night) import fails and I get the message in the audit log "error importing configuration fi...

Hello !I had CSA MC 4.0.3.736 installed when my VMS crashed. More then 60 agents (.723 and .736) are deployed on our machines. I had to reinstall all VMS including CSA MC which is now 4.5.1. My question is what has to be done on server to reconnect a...

I have a pair of PIX 525 that were doing failover with v6.3.2 code, but today I've upgraded to v7.02.The failover interface are up and I can ping the failover ip addresses but the 2 won't communicate. One is a PIX 525 UR and the other is a PIX 525 FO...

Hello,We have a problem regarding signature 6066. We got immens numbers of false-positives. The description of that signature tells:This signature fires upon detecting an excessively large number of DNS TXT record lookups originating from a single so...

For a remote PC (VPN Client) to access to the inside of the Pix firewall, I'll issue a CML: http 10.10.10.0 255.255.255.0 inside Now, I want to reverse the above command, i.e. to disable the Remote access to the inside of the Pix. What is the command...