Network Security

Is there any way to change the action triggered by the signature based upon the network/host source/destination address in all kinds of engines? In Atomic engine it is possible - for example triggering different levels of alarms, based upon the victi...

Does anybody know if with Microsoft Internet Authentication Service (IAS - radius service) it's possible to use download the access-list to the PIX firewall (per-user access-list) and how i can configure the IAS for this feature. Thanks in advance

Hi,any news about the new version of PIX OS software (maybe the version 7.x) (and which features) ?Thanks in advance for the info.

Good evening are few days that i see in the log file of my Pix firewall some strange record, now explain the threath.In one DMZ have applied an ACL that said:access-list acl_dmz-col permit tcp any any eq wwwand an access group that said:access-group ...

I used PAT to deal with all my inside addresses.And the PAT global IP is different from the pix outside interface IP.I enabled ICMP to go through my pix(OS4.4).When I tried to ping PAT global IP from outside network,I failed .I don't know why.Is it r...

hi,Does CSA 4.0 is supported on solaris 9.0as it is written that it is supported on 8.0thanks

We have a VPN Concentrator 3005 and PIX 525 and Radius server (Funk Software). Last weekend, we had to power off all the systems due to electrical maintenance in the building. When we powered on everything on Monday, the users can authenticate thro...

Does anyone out there using 4250XL on: 1. span port of switch configured as 10/100/1000 fullduplex? 2. Toplayer taps?We are unable to get the sniffing port going as it does not recognize the tap nor the span port. Upon speaking with Cisco, we wer...

I'm looking for clear guidelines, as the Cisco command ref, config guides etc do not cover all the combination of options for established from low to high and high to low security interface, NAT (inside/outside), Indentity NAT, Outside keep same IP a...

Is there a signature to capture edonkey etc. via the proxy server? Id 11018 seams to only trap the connection from the proxy to the internet address. I would like to be able to be able to identify the internal device connection to the proxy. I have m...

Hello. I have a client who is looking for a way to secure his network users and servers. His requirements are a single sign on for his network (mostly active directory / NT Domain), client and server protection and management of cisco devices. I will...

Hi,I am a newbie to PIX and I have two basic questions:1. I want the PIX to route between the DMZ and inside networks. I do not want any nating going on - I want the inside addresses to appear as such on the DMZ and vice versa - in other words the ...

Dear Sir,We want to setup a Data Center Network for core banking with all the application and Database servers.For the same we are planning to design a Two-Tier firewall network architecture. First Tier firewall (Cisco PIX in failover mode) will have...