Network Security

I have a 4240 that is alarming on this signature from a number of internal hosts. The hosts have all been checked for Virus, spyware etc. with nothing found. The IPS database indicates that there are no benign triggers. Could this be a false positive...

I have installed a 4250 and built out some custom signatures got the email working from VMS 2.2 for some of high priority alerts. This all great but I was wondering what other people use to monitor the alerts and how they get notifications. I see wha...

I want to remotely monitor the network users ip address anfd their network useage by telneting to the remote perimeter 2600 router connected to the internet using 512kbps leased line.Is there any way to monitor the user's activity such as ip address ...

Pls help me to find a simple IDS solution using a 4215, do I need CSA installed in each server in my protected LAN segment.The way I understand is the CSA is part of HIPS solution, of course I could combined HIPS and NIDS but do I have to. Cisco IDS ...

Hi,I'm unable to find a conclusive answer for the following question in any configuration guide/manual. Maybe you guys can help:What is the port range that can be used for PAT on a PIX firewall?1. 1-655352. 1-640003. 1024-655354. 1024-640005. 0-65535...

Hi all,i have a problem related within STRING.TCP engine pattern matching.Within TCPDUMP i see that there is an offset of 43 bytes between two fixed hexadecimal values.I tried to set the RegexString value to "\x26.{43}\x0F" in my custom sig, and i fi...

I looked at the PIX 7.0 data sheet (http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_data_sheet0900aecd80225ae1.html), and it talked about being able to block P2P apps like KaZaA/Gnutella as well as other tunneling apps like GoToMyPC.Ho...

As Cisco documentation says DHCPRELAY is possible on any interface of a PIX, I created a VLAN interface on a PIX515E (6.3.3) and configured DHCPRELAY on the specified Vlan interface, unfortunately without result. The workstation on the vlan doesn't g...

Can anyone tell me what is the bandwidth limit of my PIX-515 running V6.3.4?

How would i go about filtering out the file upload and download functionality in messenger ?I've already disallowed the possibility of uploading or saving from Messenger by not allowing the program the read or write files. But when a PC without this ...

Is there a limitation with the amount of simultaneous VPN Connections to a VPN Concentratior if Placed behind a PIX Firewall?Since I have to map the IPSec ports on the firewall, would those ports be occupied after the first connection, not allowing m...

I have a Public/Private network with a PIX between the 2 segments. I want to add the IDS4215. Question where shoudl I place this box? Parallel to the PIX or Inline with the PIX. Thannks fo rthe help

The README file says:S157 SIGNATURE UPDATE DETAILSThere are no new features in this update.There are no new signatures for this release.There are no tuned signatures for this release.There are no caveats for this release.So what is it good for?Regard...

anyone know to configure a pix 500 series to do IDS? according to cisco URL http://www.cisco.com/warp/public/cc/pd/sqsw/sqidsz/ it does a limited (~50 sigid's)also there is a tac case ID that states it does at URLhttp://www.ciscotaccc.com/security/sh...