Network Security

Has anybody ran into the trouble of the Cisco Works Security monitor for IDSs not getting an alarm. We have a virus in our network, sig 3030 tcp host sweep, and the IDS version Sig149, Sees the signature but it is not sending it to the Cisco Works Se...

I currently have 3 4210 sensors. I cannot acces them via SSH. How do I confgure SSH to work on them. I have configured the sensors to use SSH but i cant' find the know host file or know how to get info into it. Can anyone help?

i get the following error when trying to add a sensor to my 2.3 VMS IDS management center:Import of sensor X.X.X.X failed.Error : Error importing configuration files from the sensor - Unable to import sensor config using RDEP: java.lang.Exception: An...

I have a PIX 515 with ver 6.2 OS. On the INSIDE interface I have a couple thousand hosts with private network addresses. These hosts need to be able to go out any of the other 4 interfaces I'm using. I'm doing PAT on 2 of the interfaces, but I want n...

Hi, I have two 525's configured in FO. A few months ago I ran into a problem with 6.3.3-133 where both of my PIX's would stop responding on the Inside (embedded) interface and the secondary would flip and take control. After an upgrade to 6.3.4 the p...

Hi All.Just heard lately about the NAC architecture.There`s something I don`t understand - the status of each desktop is determined by the switches using a client installed on the stations.How long will it take for the worms writers to learn this pro...

i am looking for a CiscoWorks VMS special training including :VMS intallationVMS configuration VMS information gatheringplease can you help

Hi, is there a command in IDS V4 which would show the serial number of the sensor, similiar to the show idprom for switches? Thanks.

Hi,I'd like to employ 5-6 end point routers with embedded IPS.I do not have the opportunity to employ VMS o CSIMS.To configure these, then, I'll use the SDM.Instead, for the alarm reporting: - If I configure the communication with the old post-office...

We do have a support contract for Cisco IDS from a Cisco partner and were able to receive software upgrades for last 3 years (including major version upgrades).However on our request to provide us with an information on how to receive licenses for 5....

Hi I'm not able to see the statistics of VPN sessions terminated on PIX 515 in the VMS. Can I see the same statistics in the VMS like no of VPN sessions and other. I have tried to configure the VMS to see the same statistics but was unsuccessful.B.R.

I'm trying to use a 515E to replace a Symantec VPN/FW that uses a single public address for the following:1) Internet for internal users2) 3 Site-to-Site VPN's3) PPTP port 1723 (forwards to internal address 192.168.1.20)4) SMTP port 25 (forwards to i...

Is it possible to use active ftp opposed to passive when upgrading IDS signatures? I am running 4210s with v.4.1. During signature updates for some reason the FTP connection uses a random ephemeral port instead of port 21. When I ftp manaually from t...

We're experiencing authentication/authorization issues from IDSMC 2.0.1 and ACS 3.3. It worked fine until we upgraded from IDSMC 1.2.3 to 2.0.1. We've been through the release notes, and Employing ACS with IDSMC "Appendix C".ACS 3.3 simply reports "B...