Network Security

Hello, It seems after S159 our IDS's started refusing any config updates/remote logins and returning "cannot communicate with system processes" shortly after login and then disconnecting the session. I see there are some patches available on TAC. I c...

Cisco Catalyst switch 2950 24 ports is not added is user tracking database, although it is listed in ANI database, any suggestions/solutions

The following signatures are mentioned in the release notes but do not show up in VMS:4703.0 MSSQL Resolution Service Stack Overflow STRING.TCP Info True 4704.0 MSSQL Resolution Service Stack Overflow STRING.TCP Info True

I just upgraded to IDSMC 2.0 today. When I try to do signatures updates to a 4.1 sensor, the job fails with this error below. I already added the VMS server as a trusted TLS host on the sensor. Rebooted.Any ideas? Do I need to add the sensors cert...

I am trying to change the radius server using PDM and I can not do it it give me an error sgtating that I need to change the server on the ACL.PLease tell me whereelse do I have to go and remove the old radius server and add a new radius server.Thank...

I have several questions in regards to ARP.Does clearing PIX ARP table break any current communications between interfaces (ex. LAN to MAN mainframe connection)? How would the clear ARP affect new communications attempting to be initiated between in...

Hello all, I have a PIX 515 with 5 interfaces. I need to add a totally seperate company to an interface. I want to make it so that they can't access our internal network and dmz (with the exception of the rules allowed by the dmz). At the same time...

PIX Firewall earlier than version 6.3(2) block dns query responses if query comes from Server 2003 and the external DNS server supports EDNSO. Microsoft's workaround of disabling DNS-Probes did not solve the problem. Short of updating the IOS is th...

Hello,Is it possible to send a tcp reset with only one interface sensing to multiple Vlan ?The switching device is a catalyst 3550.Thanks

What command can I use to have CSA running on Windows poll the MC? I know that I can stop and start csagent and that will do it, but I don't want to stop the agent. I've also tried using csacontrol -c e -t c and csacontrol -c s -t c and that just s...

Hi everybody,what is the main difference between CSA 4.0 and 4.5 version? I don't find it.... :-(Thanks!!Matt

The CSAMC component of VMS uses the MSDE or SQL 2000 Server database. Now, if I am just installing the IDSMC and the SecMon for managing and monitoring IDS, what database is used by those components???

Hi all,could someone tell me if it is possible to modify Alarm level on event received by CSAMC??On other words, if an even is associated to Critical level, can i downgrade it to Informational?If not, how i can set alarm level on custom signature on ...