Network Security

The IDS MC and Cisco's IDS book show configuration for IP packet capture for later viewing through Ethereal.Question: If I set IP logging on the IDS, how do I retrieve the file for Ethereal analysis?

I have a client with dual pix 515s in a failover set. I just recently downloaded the 3DES activation keys for both boxes, and noticed something strange. The serial number for the pix currently configured as primary received the FO license, and the se...

Hello! My doubt is with respect to the NetSky virus and the form in which the sensorial IDS stops it. The sensorial IDS detects it in my reports that it generates, but I want to know if it prevents that the complete mail arrives yet and the virus fil...

Hi!1. Does anybody know when will CTR functionality be integrated into the VMS or IDS sensors?2. Can anybody provide a description of CTR communications when it performs L1 and L2 analysys? What ports needs to be opened on the firewall, what services...

Hi,I'm trying to establish a second site-to-site VPN on one of our Cisco 831 routers for a home user. Our network is such:London Office: 192.168.0.0 (PIX 515e)New York Office: 192.168.52.0 (PIX 515e)Home user: 192.168.100.0 (831 Router)There is curre...

Good day to all! - I get quite a few Alerts on our VMS for CSA's that show the ...\system32\services.exe attempting to Open and Read/Write the ACL information on CSA application files - i.e.; csacenter_2k.sys, agentinfo.exe, csafilter.dll, etc.I beli...

Dear all .I am using ciscoworks vms 2.2 for monitoring nids alerts , csa alerts . this is very slow and im nt able to see csa alerts. i mean tht window is nt opening , due to some apache web agent problem. now i want to uninstall this vms2.2 and rein...

Currently, I am using IDS 4210, I am wondering is there is a way to create custom signature to capture alarms only on Port (6129). Any Idea on how to do that?Thank you

I have multiple 4235's and need to enable many signatures and manipulate many signatures. Is there a way to do multiple sensors at once? Can I do this in the CLI and script it?

Hi,I am Rakshit Jethva,I am working as a Network Engineer in a BPO.We are having Internet from 2 ISP. I am having problem in Natting, i would be happy if any 1 can help me out.My Scenario is, we are having 2 ROUTERS and 1 PIX 515E.1st ISP has Public ...

Dear All, whts the difference in following two statements , any way whtever service u want to allow.. tht will be specified in access list . they y this particular port translation , can anybody..pls clear my doubt.static (inside,outside) tcp 10.55.1...

We want to test the new version of pix software when it comes out. We have an old unsupported 520 and want to use it as a test box, before we upgrade our 535s. Does anyone know if this box will support 7.0. This link says it will run on 515, 515e, 52...

I have an Exchange server that is getting bombarded with MYDOOM.BB viruses. The server virus software is detecting these, but we would like to determine the source. However, my IDS 4215 which is monitoring that network segment is not alarming at all....