Network Security

Greetings,I just deployed S140 to a production sensor that had a number of custom signatures. Actually, to be more precise, it had two custom signatures with a number of sub-signatures each.Here's the rub. The update left the most recently added/modi...

The above-said value, according to docs is 40. Should it not be 100? Why would we want to tail-drop when Average-Queue-Size reaches 40 % of maximum queue size, should it not be 100%?

HI,I have Cisco PIX 515E ,have created VLAN on inside interface as VLAN2 (logical interface),assigned it an ip 172.17.1.xx ....Now i also have a 3-com super stack 3 switch on which i have created a VLAN2...i have connected a machine on the port of V...

The IDS MC and Cisco's IDS book show configuration for IP packet capture for later viewing through Ethereal.Question: If I set IP logging on the IDS, how do I retrieve the file for Ethereal analysis?

I have a client with dual pix 515s in a failover set. I just recently downloaded the 3DES activation keys for both boxes, and noticed something strange. The serial number for the pix currently configured as primary received the FO license, and the ...

Hello! My doubt is with respect to the NetSky virus and the form in which the sensorial IDS stops it. The sensorial IDS detects it in my reports that it generates, but I want to know if it prevents that the complete mail arrives yet and the virus f...

Hi!1. Does anybody know when will CTR functionality be integrated into the VMS or IDS sensors?2. Can anybody provide a description of CTR communications when it performs L1 and L2 analysys? What ports needs to be opened on the firewall, what services...

Hi,I'm trying to establish a second site-to-site VPN on one of our Cisco 831 routers for a home user. Our network is such:London Office: 192.168.0.0 (PIX 515e)New York Office: 192.168.52.0 (PIX 515e)Home user: 192.168.100.0 (831 Router)There is curre...

Good day to all! - I get quite a few Alerts on our VMS for CSA's that show the ...\system32\services.exe attempting to Open and Read/Write the ACL information on CSA application files - i.e.; csacenter_2k.sys, agentinfo.exe, csafilter.dll, etc.I beli...

Dear all .I am using ciscoworks vms 2.2 for monitoring nids alerts , csa alerts . this is very slow and im nt able to see csa alerts. i mean tht window is nt opening , due to some apache web agent problem. now i want to uninstall this vms2.2 and rei...

Currently, I am using IDS 4210, I am wondering is there is a way to create custom signature to capture alarms only on Port (6129). Any Idea on how to do that?Thank you

I have multiple 4235's and need to enable many signatures and manipulate many signatures. Is there a way to do multiple sensors at once? Can I do this in the CLI and script it?

Hi,I am Rakshit Jethva,I am working as a Network Engineer in a BPO.We are having Internet from 2 ISP. I am having problem in Natting, i would be happy if any 1 can help me out.My Scenario is, we are having 2 ROUTERS and 1 PIX 515E.1st ISP has Public ...