Hello,I am trying to build a custom signature that is matching http header or body that contains certain regular expression. Any Ideas how to do that ? I tried Web Server signature but there I can only match HTTP header.
I am testing NAC, CAT 1.0.55 is installed on the client side, and the Cisco Trust Agent and Cisco Trust Agent Event Logging Service are started. But from the NAD, when I debug eou all, I always got "CiscoTrustAgent=NOT DETECTED". What could be wrong?
When configuring security zones in CTR 2.0 I understand that it processess the zones in a top down method. My question is that if, say for example, you have 5 security zones configured. An event comes through that matches security zone #2. Does pr...
The current PIX OS 6.3(4) can only work with Microsoft Standalone Root CA. Does anyone know if Cisco has plans for PIX OS 7.0 to work with Microsoft Enterprise Root CA ?Regards,Kamran
I am looking for examples of VPN Concentrator configurations that provide access to Citrix and applications on the network. I have our intranet and e-mail access working. Any assistance will be appreciated.Lou Kirt
Why are they putting worm signature's in the 12000's range?????42. 12025 0 Kelvir Worm Activity STRING.TCP No High None 43. 12025 1 Kelvir Worm Activity STRING.TCP No High None 44. 12026 0 Fatso Worm Activity STRING.TCP No High None
Hello,We currently have a complex VPN network with watchguard firewalls that we want to migrate to cisco routers but cant get it to work.Site A has a connection with site B using the ipsec policy 10.50.0.0/16 - 10.0.0.0/8.site C also has a VPN with s...
Hi, i have first Pix 515 connected with external interface to First Provider (8 public ip address) and with internal interface to my Lan.Second Pix 506 is connected with external interface to Second Provider (8 public ip address) and with internal in...
I am having trouble configuring my Cisco pix 501 to work with my mail server.To start of I will describe my environment.I have a DLS router to connect to the internet. I connect the Pix to the DSL router then connect the pix to a switch. On the switc...
Hello,I am trying to configure remote management for a PIX 501 from my main office.Here is the scenario:Both PIX firewalls are running PIX OS 6.3(4) and PDM 3.0(2) software.I have a static VPN tunnel between the main office and the remote site.For il...
I did a quick search of the forums for people using non-mircosoft CA's (IE: Linux, or FreeBSD), and could not find many or any posts.Even under the PIX Examples (http://www.cisco.com/en/US/customer/products/hw/vpndevc/ps2030/prod_configuration_exampl...
Hi;If I need to telnet into a pix from outside and change the e0 address & default route is there a wayto do that without getting disconnected, and without using inside interface or modem?Thanks
I keep seeing the Sig ID 1300 TCP Segment Overwrite between two hosts. This is normal traffic and I have no reason to suspect the machines as having to been compromised or misused. I was wondering if anyone has had the experience of seeing this signa...
