Network Security

Hi,When I try to ping a database server from a web server through an internal Pix 506e I get ‘Deny icmp src outside:WebtoPixDMZ dest inside :Database by access group “acl_sql”The web server is connected to the outside interface of the Pix while the D...

Anyone run into any anomalies creating a tunnel between a PIX and a Checkpoint?Tunnel worked fine with 6.3.4 moved to 7.0.2 and now it doesn't work.. gets invalid id message...

I have a web server behind my pix running 7.0(2) code. When a client attempts to connect it sends the following1 sec - client - SYN1 sec - PIX - SYN ACK Win size 01 sec - client - ACK1 sec - Server - SYN ACK Win Size 248401 sec - client - ACK3 sec -...

Dear All,i want to generate an .xls sheet report for pix logs , can anybody suggest me any log analyzation tool or some format .if anybody doing the same pls give me format and infoThanks in advanceRegardsNataraj

Hello,I've just recently been faced with a flood on a 3750 that I can't seem to handle and would greatly appreciate any help offered.I have the following setup:24 interface used out of 48 on a Cisco 3750.The C3750 has unicast storm control which prev...

I would like to configure a 5.x sensor to sync to ntpd running on Linux, specifially Redhat. Anybody have any experience doing this? Thanks,Matt

Right now I am planning a new network and i haven't decided if i should use the fw features in the 2800 router or use the pix 515s i have right now. keep in mind that i have a cluster of ISA servers on my network . is the FW features in teh 2800 much...

I understand the use of the ? character in a regex to match on 0 or 1 occurances of the previous character. But, I don't understand what it means when it is in braces. Some examples:Sig 3200 RegEx ends with [? \r\n\t], it appears that there is a sp...

I have encountered an issue with a CheckPoint SecureRemote VPN client running through a PIX-515e firewall. The client appears to connect, and traffic seems to be getting to the CheckPoint firewall, but the client does not receive any responses. The...

The "Bad Layer 4 Checksum" counter for our IDSM2 (inside 6513) has a very large value. Does anyone have a link/information on this counter ?Thanks,David

I have been unable to import a VPN 3000 Concentrator into VMS Management Center for VPN Routers. When importing the device it requests an enable password for the VPN. I would assume that this parameter is ignored if the VPN does not have an enable ...

Can the CSA management console be installed on Windows Server 2003?

Hi!As I wrote in my previous post: "TCP Reset feature" I would like to reset a P2P connection using the TCP Reset action of Cisco IDS. I cannot block the IP (shun connection) since it could represent a NAT address.Anyone has solved the same problem?I...

Hello,We've got two PIX'es setup in failover mode, we had an issue a day or so ago when the secondary pix took over the IDS was dead in the water because the SPAN config on our 6500 is not duplicating both ports. Suggestions on getting the SPAN conf...