Network Security

Couple general questions.I am about 3 weeks into the tuning phase on my 4250XL sensor. We are monitoring the Email DMZ as well as the General Population network.Are there any specific sig that are not on by "default" that any of you would recommend,...

I have seen on Cisco web site about the new IPS device, which seems to different from the IDS devices. Unfortunately, there isnt much information about these devices. My question is: Is this device a proper IPS device, which means does it work by o...

hi,while updating with IDS-sig-4.1-4-S134.rpm.pkg,the system seems to freeze, and never times out. when login remotely and at console, i get the error "Error: Cannot communicate with system processes. Please contact your system administrator." afte...

Hi,Can somebody tell me, if the Half-Syn open will fire only, when the client doesn't send the final handshake ACK or it fires when the server doens't send the SYN,ACK packet too?Can somebody tell me the treshold value-s for this signature? I meen, h...

I have a pix 515e with a VPN set up for the Cisco client. For users on my internal network we have an n2h2 filter server set up to block certain websites. I was wondering if there is any way for users connected with the VPN client to have their web r...

We have a cluster of devices behind the pix, sharing the same virtual IP. When there's a failover in the cluster, a gratuitous arp is sent with the new MAC for the device taking over the virtual IP. As packets need to be routed through the pix to the...

Cisco is a great compnay but I tell you their network management products must be the bottom of their priority.CW2K still is not support on Windows2003 and its almost 2005. I have 2 CW2K servers not that will not backup the configurations of my devi...

When I telnet to one of my sensors, I ran setup, I got the following error, please help.Error: XML Parser: no element found at line 1

Hello.Do you know if there are pix simulators similar to those the Boson netsim has for routers and switches?.Thanks.

Hi,does the PIX support the transparent mode at present? ThanksSincerely

HiI have recently come across a problem on our VPN 3000 concentrator. I would like to disable HTTP and only allow HTTPS through - This i have been able to do but I would also like to change the port number from the standard 443. As soon as i change t...

I have a PIX 515 and PIX 501with a VPN tunnel between the twoI have no problem accessing ether site inside interface through the VPN tunnel.My PIX 515E has a D-PRIV interface and I need to access the D-PRIV from my PIX 501What changes need to be made...

I have installed dc agent(with logon agent) in both DC(websense enterprise with reporter5.5 is installed in one of the DC),but in the websense reporter,I can see two groups,one is user in not any groups(all of these are ip address),another is DC user...

I am setting up the IDS for the first time and would like to do a "shun host" on multiple signatures. What is the easiest way to accomplish this task....

Can we use an atomic.tcp signature to trigger any event that causes a SYN packet sent to a host? And will it fire if for example we establish a telnet session to the host? (I assure telnet first establishes a TCP session and a SYN should go out at s...