Network Security

I'd like to know if there is an easy way to view events that caused the IDS to shun a host.I understand there is Event Viewer standalone, with VMS and IDM. However, with event viewer, it is difficult to view (search) a specific event that occurred i...

Hiwe are planning to deploy cisco IPS 4200 series on our network. We have a redundant network so what I need is an a device that would react to threats(via acl, shun, resets) while in passive mode ( using span or taps). couple of questions1- Is this ...

All of a sudden, I've started getting alerts on RPC WinNuke Sig#:3345 from a domain controller to workstations on the internal network. I am unable to find anything that has changed, nor can I find anything that would cause this event to be triggere...

I have a PIX 501 running 6.3(3) with a 10-user license. It has 3 IP addresses on the inside. I get messages %PIX-4-407001: Deny traffic for local-host interface:10.204.136.131, license limit of 10 exceeded. This message is produced for all three insi...

Hi all,i installed S. Agent on my xp desktop and i see on cisco doc that it is possible to activate also a firewall embedded into security agent.Where i could active this feature? Before made an agent kit ??Thnaks in advanceMarco

Hi all,could someone tell me what is the difference between these GUI Interfaces which i found on my VMS 2.3 system????1) VPN/Security Man. Solution --> IDS Sensor2) VPN/Security Man. Solution --> Administration --> IDS SensorI think there is no diff...

Hi all,i need 2 infos about security agent v.4.51) If i have a host with sec. agent installed and it is not connected with CSAMC,does it store event in a databese or not?? Then If i connect this host to my network after 2/3 days, the agent will send ...

I updated one of our PIX-515E to the new version 7.0.The box has 128 MB of RAM and has DES enabled.But when I tried to load the new PDM (asdm-501.bin file) I've got the error:Error reading tftp://A.B.C.D/asdm-501.bin (Unspecified Error).Any suggestio...

Hi all,i'm experencing troubles with my twofold IDSM-2 sensor installation; the Web Server suddenly crashes, generating a core.XXXXX file in /usr/cids/idsRoot/core/cidwebserver directory.I never experienced this kind of error before; my sensors are r...

Hi,A question, is it possible to give 3 network pleased on the Outside of a PIX Firewall access to the Internet trough the PIX fireall and into the Internet connection pleased on the inside of the PIX?The problem is that if my 3 network needs to go a...

After ugrade do i have to configure pix again ? ...is my old config compatibile (6.3.4) with new ios ?

Example global (outside) 1 114.33.100.190 nat (inside) 1 0.0.0.0 0.0.0.0 0 0 global (outside) 2 116.62.42.65 nat (inside) 2 0.0.0.0 0.0.0.0 0 0 Will this work? I have two T1's from separate ISP's. I'd like to load balance outbound per destination at ...

At the moment I am configuring a PIX 501 FW. Behind the FW I got a videoconferencing server serving clinets on Internet.I have set up at static nat to the server from the public IP and opened all the needed ports. But still I cant contact the applica...

Hello I need to allow a server on a DMZ to access an other server on the inside network by NFS.What's the easiest way to do that ?I wrote something like that but I don't know if it's the best thing to do:access-list dmz-test_access_in permit udp host...

Dear sirs. I have several 4235 sensors and SMARTnet 8x5xNBD contracts on each of them.Have I upgrade their software to IPS v5.0 within this contracts or I should get licenses for the IPS?