Network Security

Anybody know where to find a good documentation on how to configure and install ids sensor in inline mode.Thanks.

(please see attached diagram - done in paint!) Basically I would like to use the ips 4255 to inlineIPS my internal network and also promiscous/IDS my DMZ.The IPS 4255 has four interfaces - would this be a workable solution - also what are the potenti...

I'm receiving this alert from the management centre for IDS sensors : Name: IDS database files Size Limit: 8 GB Current Usage:128.87% (10.31 GB) Note: Current usage is more than the recommended limit. How do I prune the size of these files automatica...

How do i know if my CSA is in test mode or protect mode?

I have the following problem and hope that someone on this forum can help me.We have a customer who is using a SonicWall TZ170 (OS Standard), Now our requirement is to setup a secure connection to this customer. We are behind PIX (OS 6.3); we don’t w...

I am using IDS4210 with ver4.1 with 512MB memory.Can I upgrade to ver5.If I upgrade to 5 does it will work as IPS?.If not is there any other advantage on ugrading to ver5. Thnks in advance

I have experienced something odd with our 3002 Hardware Clients behind a Cable Modem. It appears that if the Client does not have a current session established with the Concentrator, we are unable to communicate with the 'public' interface on the Cli...

hello,i have a pix 515 ur with 64mb ram and 16 mb flash. The pix ver 7 states that you require 128 mb to upgrade an unrestricted 515.my question is, if iam going to upgrade the pix to ver 7, will it revert to a restricted one?if it will, can i still ...

With signature update 176, I am getting alerted constantly on this sigID: 5526. The evironment has an AS400 that the clients access using IBM's Client Access software (uses Telnet). Yesterday, all of the passwords expired and the users were required ...

Hi,I have PIX -ver. OS is 6.3(3)- with 3 interfaces: outside, inside and dmz.PIX will be used in intranet without address translation. IP Address must be visible from any interface to any interface, no address translation is required.For examlpe: Use...

Is it possible that icmp type 11 code 0 cause pix to drop traffic?After%PIX-3-313001: Denied ICMP type=11, code=0 from x.x.x.6 on interfaceinsideaccess list denies traffic it otherwise passes

Topology:7204 ----- Dsl/Atm/pppoe ---- C831+ C1601 ---- serial ------ C1601 ---+Eigrp is active on all routers.C831 obtains routes from C1601 remote serial line, but is unable to discover 7204 main site Eigrp routes.Are eigrp hello packets blocked on...

Can anyone tell me how to test or trigger a signature to determine if shun requests from the master blocking sensor (MBS) are actually resulting in shuns in the PIX? Can this same procedure be applied to FWSMs?

I was under the impression that I should be able to access the failover firewall when it is in standby mode. Currently, I am unable to ping any interface, access the firewall via the PDM or SSH. Conversly, while consoled into the standby firewall I c...