Network Security

I'm trying to use the logging facility to refine an Access List in a test network. At the end of a list of ACE's I have a "permit ip any any log 5"I had the idea that only the flows that had fallen through all of my other rules would reach this last ...

I am monitoring my PIX 515 performance using the PDM 3.0 Console. Periodically throughout the day, the Interface status hits 2000Kbps. Can anyone tell me the easiest way to determine who is causing this on my network. Cisco Switches, Routers, etc. ma...

Hi,I am trying to translate a host coming in over a VPN on a PIX running 6.3(1) with no success.I have tried a static mapping and also a nat with a global as follows:nat (outside) 3 10.10.10.0 255.255.255.0 outside 0 0global (inside) 3 192.168.168.16...

Hello,The "copy tftp flash" command on PIX will erase the existing IOS image in the flash and write the new image into the flash.What is the procedure if I wanted to save the existing IOS image before the upgrade?Is there a copy flash tftp or equival...

Nothing on this one is posted at the Cisco IPS Alert Center (http://www.cisco.com/pcgi-bin/front.x/ipsalerts/ipsalertsHome.pl). Given the info posted at hexview.com (http://www.hexview.com/docs/20050331-1.txt), can we expect a signature soon?Unfortun...

I have searched the forum and couldn't fine a similar problem, so I am sure I must be missing something simple, hence my apologizes upfront! Here is my situation/ problem: I have an ADSL Bellsouth line with 5 Static IPs. It is connected via a Netopia...

Hi,I am having this unique issue. Whereas the IPS system time is correct, and I have set a UTC offset of 330 min (being in the GMT +5.30 hrs time zone.), I am still seeing the event time on the IEV as UTC, and not the system time. This is kinda tedio...

We some got a NM-CIDS-K9 module and it running ver 4.14 s91 signature everytime I issue the upgrade command and point to the ftp server I get and error messages saying the digital signature file is invalid??? any ideas? thanks

Hi everybody,i have a problem with a pix behind an ios router.when i try to connezt from my vpn-client i get an 412 error (remote peer is no longer responding), than i do a ping from pix to the intern (with a destination that answers), and then i try...

Dear Cisco guys,I have Cisco Secure PIX Firewall 520 series, IOS Version 5.1(4), with following specificationsHardware: SE440BX2, 128 MB RAM, CPU Pentium II 349 MHzFlash AT29C040A @ 0x300, 2MBBIOS Flash AM28F256 @ 0xfffd8000, 32KBIf I replace Flash m...

Hi All,We have a PIX 525 with 1 4-port FE + 2 GE ports. I am using the 2 GE ports for inside and outside interfaces. I use one FE port for the DMZ. When I ping servers on the DMZ from inside/outside network, I loose 2-3% packets. Sniffer traces show ...

Hi,Why is it that when users are connected to the pix via pptp they can't hit the internet? All they could hit is the inside network. I have configured the pix to nat anything to it's external interface for internet access.

Can someone please tell me what does "logging history" command does. How does it differ from "logging trap".Thanks.

1. When we configure TCP resets, Shunhost, or Shunconnection in the "action" option of the IPS 4240, is this action taken on behalf of IPS through its Command and control port or the Monitoring port? 2. If through Monitoring port then if we take the ...