Network Security

Hi, in my company I have 3 routers Cisco2600. For 2 of this router I have configure a HSRP protocol with wirtual IP 192.168.3.10/22 (the physical IP address of the ethernet interface is 192.168.1.10/22 and 192.168.2.10/22). The other router have this...

I found the link below about how to set up an ACL for blocking P2P file sharing. My question is that I was under the impression that the PIX blocked all ports coming in by default and that the only ports allowed are 80 and those defined by the fixup...

I have a test ids executing a shun to a PIX over ssh. We see the signature fire, the sensor status shows the ip address of the offending host being shunned, and a time limit of 15 minutes which we have set. On the PIX, we see the ids sensor logged ...

Has anyone else noticed the Chemtrails in the side picture of the PDM 3.0(1) Startup Wizard?Are they suppost to be Chemtrails? or something else entirely? perhaps something artistic?CheersRob

Hi folks!We're a small company running a PIX 501 device as our corporate firewall. We have a DMZ set up inside our firewall, with the bulk of our internal network being behind a Linksys router - we have a webserver sitting in the DMZ at the moment. O...

Hi there,I'm looking for a method to match packets on their specific length and either deny or allow them out of the interface. I know router IOS supports it via policies and 'match packet lenght' command. So far I wasn't able to find anything of thi...

I am implementing a hub and spoke VPN with 30+ 831's connecting to a central pix 515 using ezvpn. 831's are in network extension mode with split tunneling and each with a non-overlaping private subnet (192.168.x.x). Connectivity is working fine, but...

Will Split Tunneling work when using a VPN3002 Hardware Client in Network Extension Mode? I have enabled Split Tunnelling on the 3030 Concentrator. It seems to tunnel the correct networks but it doesn't send the networks in the bypass list to the int...

We have a 515 with 1 outside, 1 inside and 3 DMZ’s. We want to allow some of the hosts on the DMZ’s access to the Internet using PAT to the outside interface address. However I can't get this to work.The DMZ interfaces have inbound ACL’s defined to a...

What is the best s/w for pix logfiles analysis...?I need a professional one.....

What is the best s/w for pix logfiles analysis...?I need a professional one.....

What is the best s/w for pix logfiles analysis...?I need a professional one.....

hi,I have enabled ip audit on my pix. I get some information logs but now I can't find anything on this site regarding the signature ids.I know that there are around 55 ids but what are those? is there any link with a description of all 55 signature?...