Network Security

Does anyone know of any problems with Router-to-PIX vpn tunnels? For a number of months we've had about 35 831Routers vpn'd into our PIX515 and the tunnel has been stable. Recently, however, the tunnel has been dropping out at a number of sites. W...

hi,we are using ACS TACACS+ for our cisco devices telnet security, but we are also using DC database for authentication and if database goes down, authentication is stopping. at this time cisco device still searching for tacacs server and does not al...

Has anybody got a robust solution to fix windows update issues.When a user runs windows update they are prompted to allow the application. Choosing YES seems to allow windows update to work.After updates are applied and the PC is rebooted, the user ...

Dear All ,does we require the following in any case , in a Pix firewall.access-list inside permit ip any anyis this necessary ?? can anybody throw something on this.. thanks in advance.RegardsNataraj

HiIn the copy sensor configuration "Copy Wizard" its no longer possible to select signatures (i.e. enable, action etc.) why or has it been replaced by something else ?RegardsGert

I keep getting this error on one of my devices and it also is having problems logging events. I am wondering if these two problems are related. I am not sure what the Cid/E invalid document is referring to. If someone could kindly advise than mayb...

Hi,How do I restrict vpn client access to certain servers on the inside network?I can do it using access lists on the inside interface from the Lan servers to the vpn client but how do I restrict access the other way?Sample:VPN Client 10.10.10.1Lan ...

Hi,A quick question does PIX 501-unlimited can createsite-to-site VPN tunnels. As i found this thread saying no. http://www.tek-tips.com/viewthread.cfm?qid=1004408&page=1Below is the scenario: Cisco 501-Unlimited (Dallas, TX)[HQ] ...

I have a pix 501 configured with static nats similiar to this:static (inside,outside) 123.123.123.1 192.168.123.1static (inside,outside) 123.123.123.2 192.168.123.2These two servers are mail servers. If one mail server needs to send mail to the othe...

Does anyone know where to find the database layout of the SQL/MSDE database backend to the VMS/CSA software? I am looking to build some custom reporting on the data gathered by this product and figured it would be a lot easier to do if someone has al...

Hi all,I have a pix 501 ver 6.3(4), I need help migrating away from the now obsolete alias command.The situation is like this:I have two internal hosts both with external addresses provided by PIX static commands, these hosts need to access certain i...

I am trying to find out whether it is possible for a external client who is connected to our network via a PPTP VPN on our Cisco PIX 515E [version 6.3(3)] Firewall can utilise an SSL connection with ....1. an SSL enabled web site2. an SSL enabled Cit...

I recently had to rebuild my Cisco IDS Event Viewer installation on my Windows XP machine. I've never had a problem running it before, but today it wouldn't run. So, I uninstalled, did two cold re-boots, and re-installed. It gave a message at the ...

Hi All,I have been trying to setup a test VPN connection from my Home DSL to the Cisco 2610 Router here at office running IOS versionIOS (tm) C2600 Software (C2600-IK9O3S-M), Version 12.2(21a)I have read that I need to use crypto isakmp client config...

Hi,I have one 4215 IDS with 5 sensor interfaces. It is managed and moitored by VMS 2.2.I want to put different rules for different interfaces. ie different levels of signature tuning and different types of action on attacks on each interfae. Is it po...