Network Security

I need a program that do a 'real time' parsing of the syslog output from Cisco PIX firewalls: to perform searches on or filter log records to quickly locate and track events of interest. (like the CheckPoint SmartView Tracker consolle http://www.chec...

Our setup right now is this:We have 2 Watchguard firewalls. One is for one domain with 3 DMZ's and the other is for another domain with 1 DMZ. I was wondering if I can consolidate to 1 PIX and run the other pix in standby. Would anyone NOT suggest...

Wondering if I can do this. Here at corp I have a 3005 and my external small offices all connect into it via 3002 hardware client.I am bringing on 4 new offices all of hilton head island. I would like to place a 3005 out there at Hilton Head Island...

I am adding a failover firewall to our network. Our ISP has a 30-bit subnet for our outside network connection. One IP address for there router and one for my firewall. To add a failover firewall should I ask my ISP for a 29-bit subnet for the ext...

What is the best way to ensure the MC database is in sync with the actual running config for a sensor? Currently I remove and re-add the sensor if the MC does not reflect the actual sensor config?

We have a remote office that we would like to isolate with a PIX. Currently we have a trunk between the core located in our building and the core located in their office. All traffic is layer 2 and there is no routing between the buildings, just the ...

MC for IDS Sensors Update Network IDS Signatures ErrorObject update failed. The update package provided appears to be corrupt, or permission was denied for reading the file. Please verify the update package contents and retry the operation. I ve...

Since we now have inline IPS box which is going to sit between your outside network and inside network and going to analyze traffic before it reaches the host on either end. Now if you have firewall box, even that's going to analyze the traffic and ...

I am planning on installing the PIX PDM 3.0(2). I read that running the PDM is incompatible with Policy NAT. I have the folloinwg lines in my configuration:access-list 90 permit ip 192.168.0.0 255.255.255.0 192.168.15.0 255.255.255.0 nat (inside) 0...

How can I view all pass/dropped traffic on the PIX firewall. I want to troubleshoot a connection problem and want to know wether the traffic is even getting to our firewall. If so, wether it is being dropped or passed. How can I enable logging and vi...

We set up nat as follows:global (outside) 1 1.2.200.10-1.2.200.250global (outside) 1 1.2.200.251 netmask 255.255.255.255nat (inside) 0 access-list inside_outbound_nat0_aclnat (inside) 1 Cedar 255.255.0.0 0 0static (inside,outside) MailOut Mailinside ...

Hi All,How to differentiate Cisco IOS IDS from a stanalone box IDS 4200?Thanks and Regards,mak

Dear Sir,I have IDS 4215 now I can access to IDM by IE6 but I don't know how to dowload IDS event viewer.Can you help me,Thanks very muchNhuongPham

I use MC(1.0) to monitor IDSM(ver 4.1(4)S91).First step I config MC to add the IDSM and then I found that the Device Status was Not Connected in Monitoring Center-Security Monitor,what's the problem or what else should I do.How to add a sensors in Ma...