Network Security

I was curious as to where other administrators have their IDS devices on their network. Do you have the span set up to monitor a trunk link off a main closet? The reason I'm asking is that I notice the memory utilization on our local device is consta...

I have 10 exiesting PIXs. I'm scared about Firewall MC. It wants to convert my NAT 0 acls to the below.Why can't it just work with what it imported? What change the ACL names, etc?NAT Conversionaccess-list acl_mdc_inside_access deny ip any any log de...

I would like to redirect my port 80 traffic from my inside interface to the dmz interface.I have a pix 515e and three interfaces - inside (private net), outside (pub net Internet) and dmz1 (which has a squid proxy)What I want is when a user makes a w...

Can regex be used in the Service Ports field when tuning signatures? If so, what is the negate expression. If I want to exclude port 53 from a sig would I put in "!53" or "?!53"?

Hey guys,I just need to make sure that I understand a couple of things correctly. The native VLAN (VLAN1) will not work with a PIX set up for VLAN support through logical interfaces, correct? Does this mean that I simply need to re-assign all of the ...

I’m trying to configure the following I have a Pix525 with 3 physical interfaces. The DMZ interface is configured for VLANS. Only 2 vlans are used, native (matching up to VLAN1 on my switch) is used for my DMZ servers and VLAN 55 is used to connect t...

Hi everyone,I'm planning to put a PIX 525 between our Web Server and a Database server. Let's assume the Web Server has IP of 192.168.3.5 (netmask 255.255.255.0) and the DB server has IP of 192.168.2.6 (netmask 255.255.255.0). The port I'm going to u...

CSA agent will be suspended/terminated abnormally by malicious code or loop-hole of the OS kernel like what happened to certain Antivirus software?Please comment, thanks.

how do i do tcp load sharing in the pix DMZ.that is i have 3 web servers and i want to nat all of them to a single global ip address for roundrobin basis of servicing web request from the internet.can i put three statis statements for these web serve...

Running 6.3(3)122 on pix and 12.2(8)T on 1721Pix is at home on SBC DSL and 1721 is @ office on SBC DSLAnyone tell me why PIX might be resetting?Or tell me what logging option to use?Chris

I have a customer who is trying to conserve their public IP addresses. The VPN 3005 is behind a failover PIX firewall in a DMZ zone, and I originally tried using static NAT on the PIX for the public IP of the 3005. However none of the LAN-to-LAN tunn...

Hello,forgive me if i will stress again about signatures update through VMS IDS version 2.0.Since i installed it, i'm experiencing a well known problem related to the following error message:Sensor ids-mo-dis-2: Signature Update ProcessAn error occur...

Hi All,I have the following scenario.Currently have 1 internal network connected to pix.Would like to add a second using a lvl 3 managed switch connecting to the pix. So both networks connect to the switch then switch to pix.Primary concern is can th...

Hi!Would it be possible, using Cisco PIX, to set up a lan-to-lan VPN where the peer has a dynamic ip?The peer-command doesnt seem to accept a hostname (as something.dyndns.org).What about IOS? Is it possible there?/Thanks

Have overlapping network 172.16.9.0. Trying to follow the link according to which this scenario will work. http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_sw/v_63/config/bafwcfg.htm#wp1113571The scenario is not working. This is what I f...