Network Security

I like to block ip range for 64.68.96.0 with 64.68.127.255 as subnet mask at PIX 520.conduit deny tcp host 64.68.96.0 subnet mask 64.68.127.255 0 0I don't want to use any access list.

What ports need to be open for SecMon to retrieve alerts from a sensor? Is there more than SSH and 443?Thanks

I have a number of spoke sites connecting to a central hub site. All sites are using ISRs (2801s no PIXs). I want all internet access to be via the central hub site (no split tunneling). I know that this would have been a problem with a pix at the hu...

I'm having problems performing an FTP update command on 4.1.4. I've tried all the various combinations of passive mode, etc.Has anyone seen the IDS not be able to pull updates in passive mode? Here is the FTP server log of the session:Wed Mar 2 01...

I have seen the information for IPS Version 5.0. How long will you continue to support version 4.x?

Hello,I want to monitor 2 vlans (Pix inside and Outside) with TCP Reset on the same switch 2950 and i have only one sensing interface on my sensor 4210 !Is it possible to do that ?Many thanks.

Hi.I am new to PIX and am having some setup issues.I have just purchased a PIX 501 - unlimited license. My internal network is currently configured using static IP's using 192.168.12.XXX with a 255.255.255.0 subnet.I want to replace my current firewa...

PIX 515 6.3on my inside interface:192.168.1.1 is Cisco VPN hardware client192.168.1.2 is inside interface addresstrying to route 10.20.14.x address thru 192.168.1.1 and any other requests like internet access thru 192.168.1.2commands used:route insid...

I am trying to do a signature update from IDSMC 2.01 but for some reason the process fails with the following error message. Sensor xxx: Signature Update ProcessAn error occurred while running the update script on the sensor named xxx. Detail = An e...

CSA generates Warnings along the lines of:-An unauthorized Network Component, 'NDIS Proxy' was detected registering with the system. The operation was permitted. Details Rule 424 An unauthorized Network Component, 'QoS Packet Scheduler' was detected...

Hi,I'm trying to connect a client to the Internet using a 2 firewall scenario. I have an Internet FW and a DB Firewall with a WebServer in between. Right now, I want the clients on the inside of the DB FW to connect all the way to the Internet. Wh...

I have setup a pix in my lab before i go live with it. I setup the outside route and the nat and it worked fine from clients on the inside accessing the internet. But when i configure the VPN and SSH connections im not routing outside from the clien...

Currently we have a Cisco PIX 535, with version 6.3(3) on it. The scenario is as follows: We have a newly-installed IBM z990 host-system that is running IBM's Enterprise Extender(EE). EE is basically IBM's HPR over IP. It allows SNA to be encapsulat...