Network Security

Does Cisco have any recommendations on putting CTA on servers and using NAC?This is more in anticipation of NAC on switches. If you have good physical security over how servers connect to and disconnect from a switch, and you have good control over s...

Senario:Note: Squid proxy at DMZ of PIX (single legged).Inside LAN: 192.168.22.0 /24DMZ : 172.16.10.0 /24How to go ahead to configure PIX acl to forward all http, https, ftp traffic iniated from inside LAN to Internet?eg.access-list dmz_in permit tcp...

We have a number of 2821 routers that I have in VMS as IDS devices. When I try to upgrade the signatures with the IOS IPS zip file I get an error message that says the file is not recognized as a signature update. Are there any examples of how to upd...

Hi,We want to upgrade one of our pix to support version 7.0. In order to do so, we need to upgrade the mem to 128Mb (as this is an unrestricted). Unfortunatelly, the two mem slots are full (2x32mB). Did someone know what the PIX-515-MEM-128 contain? ...

I've got 7206 IP/FW/IDS 12.3(11)T3The very strange problem: 1) half of SMTP trafic does not flow from Internet to my inside SMTP server (public address) Though I turned all signatures off except HTTP block2) inside FTP clients can not get some files ...

Currently I have 10 inside host available. I need to add more and what is the command to execute activation-key? or do I need to buy this from Cisco?thxEric

Hi all,I have a PIX 515E that we recently upgraded to 128mb RAM and PIX 7.0. At the very top of our inbound access list, we have the following lines to enable people on our LAN to be able to traceroute to the internet:access-list outside_access_in li...

I have two 2811s in a tandem configuration. One is the border router with an atm aim, two VWIC-2MFT-T1 and 2 atm pvc's connected to the internet. The other 2811 is being used for voice services. The one being used for voice services can be accessed w...

hi guysI connected the eth1 interface to a hub and my laptop to the hubThe link led is flashing green on both interfacesI cannot ping the pix515E on 192.168.1.1 and do not have a valid IP adress on my laptop despite PIX being able to give DHCP adress...

There is problem upadating and getting the version of my IDS (4215 and 4235) from a Ciscoworks MC. After applying the updates the sensor return with the last update and i couldn't query the sensor.

Hi,I am running ping to PIX within the same subnet, it works but it is not seen in "debug icmp trace" output.If I ping from outside of the interface subnet,it is visible in the output.i.e 43: ICMP echo request (len 56 id 17943 seq 42141) outside IP a...

Hi,I have 70 pixs remotely connected to the Concentrator via VPN IPSec tunnel.Now I'm moving the concentrator to CoLo facility with new assigned IP addy.I will be editting and remove previous IP and adding copy and paste editted new IP like crypto ma...

Hi,I have a pix firewall,each time if there is a ip conflict on the network with the PIX interface ip address.PIX interface goes down.Is there a way to fix this.RegardsMeer

Recently configured IOS IDS on a 3620 and now clients cannot connect using windows remote desktop. I tried disabling a few of the signatures with no luck. Any ideas?

Hello, I have a little 26xx running 12.3 with IP/FW/IDS. I am logging to a syslog server. The problem is, I get a large amount of ICMP sig log entries (especially #2004 ICMP Echo Request). I want to continue using the IOS IDS module on the router to ...