Network Security

MC for IDS Sensors Update Network IDS Signatures ErrorObject update failed. The update package provided appears to be corrupt, or permission was denied for reading the file. Please verify the update package contents and retry the operation. I verifie...

Since we now have inline IPS box which is going to sit between your outside network and inside network and going to analyze traffic before it reaches the host on either end. Now if you have firewall box, even that's going to analyze the traffic and m...

I am planning on installing the PIX PDM 3.0(2). I read that running the PDM is incompatible with Policy NAT. I have the folloinwg lines in my configuration:access-list 90 permit ip 192.168.0.0 255.255.255.0 192.168.15.0 255.255.255.0 nat (inside) 0 a...

How can I view all pass/dropped traffic on the PIX firewall. I want to troubleshoot a connection problem and want to know wether the traffic is even getting to our firewall. If so, wether it is being dropped or passed. How can I enable logging and vi...

We set up nat as follows:global (outside) 1 1.2.200.10-1.2.200.250global (outside) 1 1.2.200.251 netmask 255.255.255.255nat (inside) 0 access-list inside_outbound_nat0_aclnat (inside) 1 Cedar 255.255.0.0 0 0static (inside,outside) MailOut Mailinside ...

Hi All,How to differentiate Cisco IOS IDS from a stanalone box IDS 4200?Thanks and Regards,mak

Dear Sir,I have IDS 4215 now I can access to IDM by IE6 but I don't know how to dowload IDS event viewer.Can you help me,Thanks very muchNhuongPham

I use MC(1.0) to monitor IDSM(ver 4.1(4)S91).First step I config MC to add the IDSM and then I found that the Device Status was Not Connected in Monitoring Center-Security Monitor,what's the problem or what else should I do.How to add a sensors in Ma...

I am trying to authenticate our PIX firewalls with a radius server, but i do not know what the PIX sends as the enable username, the routers use the $enable15$ or something like that, but this is not working with the pix.Thank you

Dear All,I am testing a custom signature on Cisco a 4230 running Version 4.1(4)S91.I am seeing alerts on the IEV but not getting any connection resets.Signature config output:IDS-1# sh configuration | include SIGID 20000signatures SIGID 20000 SubSig ...

Does anyone know how to review the details of the "canned" signatures ? Also any reference material and/or links for creating custom ones ?Thanks,David

We will be moving our IDS server to a new location and will need to change the static IP address. Will the server need to be re-imaged to do this?

Folks,We're seeing some DNS traffic via TCP 53 (and they're not zone transfers), as opposed to the usual UDP 53, from some of our newer Win servers.If we decide to permit TCP 53 in this case, does anyone know if it will it be checked by the PIX's App...