Network Security

I have a Cisco 515 and was assigned 12 Public Ip Addresses from the ISP. My config is attached. I am able to config this config and inbound access to one iis ip over port 80 is working fine. But I don't know how to add the other public ip addresses, ...

We use pix 515E configured as a failover pair in our network. I don’t think the configuration is particularly strange though we’re using many functions such as vlan interface, vpn, vpn clients and ospf routing etc. When I upgraded to 7.0 it came back...

I have PIX ipsec tunnels running for multiple locations. While adding one more tunnel I lost the all ipsec commands on PIX incuding tunnel paswords. As all tunnels are configured by diffrent engineers, I don't have passwords for all but I have backup...

Hi,I am using CSA 4.5. I want to disable and log if some one tries to scan open ports to my Server installed with CSA agent. I want to know the exact rule which will block and log the port scan activity to my server (which will be easily done by NMA...

Anyone has successfully tried BGP MD5 across PIX 7.0?Despite the static (inside,outside) ..... norandomseq .....The MD5 authentication still failed for both platform 525 and 515 running 7.0.1Without MD5 is the BGP peering can formed.

Hello,We have sensors that are physically located at many remote sites with no human on site. They are running IDS Version 4.x, please advise is there a command or way to find the serial number without flying to the remote sites.Thanks,Simone.

Dear All,I have a few questions which related to access list.1) I have one content filter server in dmz network. I want few machines to connect content filter server but I want to block the rest of the machines denied access to that server.2...

I am having troubles in getting passive ftp to work through my pix. I have no troubles with normal ftp but the second I try to use passive ftp the connection never gets established. Is there something else that I need to add into my config below fo...

Hi,I am new to PIX.Pls find the attached setup diagram and configuration.Customer using ADSL modem and ISP have given two IP address(200.a.b.c for mail.xyz.com) and 200.x.y.z public IP on PIX external interface for outgoing traffic.The customer has i...

After upgrading to PIX OS 7 I am getting following error message from all my internal hosts. It is rapidly repeating.%PIX-3-710003: UDP access denied by ACL from 192.168.105.62/138 to inside:192.168.105.255/138

I've seen this configuration on CCO and I'm not sure what it means. static (inside, outside) 10.1.1.1 10.1.1.1.Note: The same IP is used for both the public and private address. In what scenario would this be used and what specifically does it accomp...

I have purchased a smartnet agreement for my PIX 501 in January, 2005. I currently have the installed software 6.3.1 that came with PIX. What is the most current version available for the 501, and how do I get it from Cisco. Any help at all will be ...

We are seeing a very large number of these signatures firing and I'm wondering if anyone has identified legitimate MS traffic as triggering this alert.....

I'm a bit new to the IDS/IPS world but we have just received two 4250-XLs and I was going to use the ethernet monitor port but it simply won't let me. Reading the literature online it looks like this port is not useable as a monitoring port in the XL...

I recently had a vulnerability scan completed and "SSH protocol versions supported" showed up in it for my IDS. Has anyone come across this and if so, how am I able to mitigate it. Is there a way to change the SSH version on the device?