Network Security

I have an ASA-SSM (v5.x)with ntp running, I can do a sho clo and it has the correct time but the timestamps on my IPS events are way off.

Is there any way to read the serial number of NM-CIDS modules, IDS-4235 & IDS-4215 appliances remotely? I need to do an inventory of geographically dispersed IDS's without physically visiting each router or appliance.

Hi everyone!One of my costumers is connected to my Internet network (im an isp), the costumer is using dynamic nat, and on the other end, there is a PPTP server (on a hosted environment), the costumer complains that sometimes can´t connect throught t...

Hi all;I became aware of this advisory and wonder if a patch/update is appplicable or necessary.I have two 2600 series routers running 12.x vers. Here's excerpts from both:Router 1.IOS (tm) C2600 Software (C2600-I-M), Version 12.2(13)T5, RELEASE SOFT...

Were any IPS adversely affected by the time change?

Hi,We currently have a setup where an office has two VPN connections with two differentISPs and two PIXes. Even though the office is in the same building, essentially it currently is two separate networks, with each PIX providing a VPN connection for...

I'm having a hard time finding information on whether or not the PIX 515 does IPS. The product documentation states that it "Integrates with Cisco Network Intrusion Prevention System". Does this mean that it comes with the signatures or does you have...

Hi all, We have a little problem with using alias command. The DNS packet come back with udp error after we apply alias. Although I checked that the packet IP has been changed to what we want. The most wonderful stuff is some of the domain name works...

I have to migrate a Firewall concept from Checkpoint platform to Cisco PIX or FWSM platform.There are some rules for FTP -> only ftp-get implemented today.How can i handle this FTP-GET restriction on PIX or FWSM accesslists ?I only found accesslist c...

I have just purchased a Cisco IPS 4240 and have it up and running. Have been using the IEV to view IPS information and that works ok. The VMS 2.2 that came included with the IPS will not work with the current Cisco works (LMS 2.5) installation that w...

Folks, I have a VMS server and i would like to RDP into in. But, please because of strict default policy i am unable to do it, could sometime guide me as to how to open up rule for me to RDP into it. Thanks,

In CLI mode version 5.x, we run "packet capture" command to capture xx packets of an x.x.x.x IP address. Logon to service, searching thought directories but could not find the file that packet capture created. Please advise file name and directory th...

Installed 12.3.14T2 (advanced security) on 2811 router with new VMS update to the IDS Management Center (2.1) to support IOS IPS SDEE event monitoring. When I configure a specific signature, there is no option to shun. Only alert, block or reset. Whe...

I have a game application using tcp 2000 port. I have captured packets during connection.Client to Server -- TCP -- 1115 -> 2000 syn seq=0, ack=0Server to Client -- TCP -- 2000 -> 1115Syn ack seq=0,ack=1Client to Server -- TCP -- 1115 -> 2000ACK seq=...

I have a pix 501. Currently I have a server inside the firewall that has a static NAT address and access-list defined for port 80. Users outside the network are able to access this ip fine.However when other users inside the firewall attempt to acces...