Network Security

I have a group defined for internal Hosts:object-group network Dep_RH_Hosts network-object host 10.195.190.2 network-object host 10.195.190.5 network-object host 10.195.190.8... (plus 32 hosts)I have too a group for external IP addresses:object-gr...

We've been experiencing some false-positives with the Cursor/Icon File Format Buffer Overflow (SigID 5442) signature.We've had some instances where the alarm has fired on a string containing ".ani", but not at all related to a file of this type.Here'...

As demonstrated by attached screenshot, NSDB details for SigID 5489 state that this signature was released in version S164.IIRC, this signature was in fact the only new one made available via S165.Can this be corrected, assuming I'm right?Thanks in a...

Hisince V5 now is availablewhen 4.X will be EOL ?i didnt see it in CCO end of sale announcementthanks for any advanceJYP

Hi,I am new to PIX.Pls find the attached setup diagram and configuration.Customer using ADSL modem and Linksys router.ISP have given two IP address(200.a.b.c for mail.xyz.com) and 200.x.y.z public IP on PIX external interface for outgoing traffic.The...

I've installed the Hp Openview NNM on the DMZ of a PIX 515E in order to supervise my inside,DMZ and outside network. But, I did'nt manage to access to the inside network since I can't ping the inside machines from the DMZ. Of course, I can ping the i...

I have trouble with configuring idsm-2 inline mode(5.0).it seems that traffic doesn't go through idsm.I chechked it on command: sh interfac gi0/7(idsm mode)the 'pair Status=down'(below) shows that, i think.moreover, total packet received doesn't incr...

I´ve created a new vpngroup and assing it a range of ippool similar to the first one. My clients can login using the new vpngroup but they can´t see my LAN and I can't see themI don't know what's wrong????For every new vpngroup, should I have to crea...

I have a 1760 at a remote location and a concentrator 3000 at my main office. Is there a easy way to setup a vpn between these two devices?Thanks

When trying to retrieve IPLog traces or the trigger packets from the Security Monitor, I get the following error message:Packet Viewer - ERRORjava/awt/Component: method getHeight()| not foundUnable to initialize Packet Viewer.Of course, the trace doe...

I have searched EVERYWHERE for an answer on this but I can't find a thing. Our IDS worked fine for a few months but now all the alerts just say ALARM FEED INACTIVE (Cannot connect). I have rebooted both the sensor and the agent various times, check...

Just a short question: does anybody know how long will there be development of signatures for 4.x sensors ? Will they be for free or is there also subscription on the way ?THX

So, I'm looking at the NAT-control command in PIX 7 and thought of a hypothetical situation:1) Let's say I disable NAT control with the 'no nat-control' command. I have public IPs in my DMZ, so I don't want to have to mess with a static statement to ...

Hi All,The command 'copy flash: tftp' is not seen in ver 6.3(3) but is available in 7.0(1)Version 6.3(3)PIX# copy ?Usage: copy capture:<capture-name> tftp://<location>/<pathname> [pcap] copy http[s]://[<user>:<password>@]<location>[:<port>]/...

HiI am using exchange 2003 server in my network and it is connected to inside interface of the pixfirewall which goes to leased line. In the firewall I have given a static nat for the exchange server also I have 16 global IPs nat to internal network...