Network Security

Dear Sir,I have IDS 4215 now I can access to IDM by IE6 but I don't know how to dowload IDS event viewer.Can you help me,Thanks very muchNhuongPham

I use MC(1.0) to monitor IDSM(ver 4.1(4)S91).First step I config MC to add the IDSM and then I found that the Device Status was Not Connected in Monitoring Center-Security Monitor,what's the problem or what else should I do.How to add a sensors in Ma...

I am trying to authenticate our PIX firewalls with a radius server, but i do not know what the PIX sends as the enable username, the routers use the $enable15$ or something like that, but this is not working with the pix.Thank you

Dear All,I am testing a custom signature on Cisco a 4230 running Version 4.1(4)S91.I am seeing alerts on the IEV but not getting any connection resets.Signature config output:IDS-1# sh configuration | include SIGID 20000signatures SIGID 20000 SubSig ...

Does anyone know how to review the details of the "canned" signatures ? Also any reference material and/or links for creating custom ones ?Thanks,David

We will be moving our IDS server to a new location and will need to change the static IP address. Will the server need to be re-imaged to do this?

Folks,We're seeing some DNS traffic via TCP 53 (and they're not zone transfers), as opposed to the usual UDP 53, from some of our newer Win servers.If we decide to permit TCP 53 in this case, does anyone know if it will it be checked by the PIX's App...

Couple general questions.I am about 3 weeks into the tuning phase on my 4250XL sensor. We are monitoring the Email DMZ as well as the General Population network.Are there any specific sig that are not on by "default" that any of you would recommend,...

I have seen on Cisco web site about the new IPS device, which seems to different from the IDS devices. Unfortunately, there isnt much information about these devices. My question is: Is this device a proper IPS device, which means does it work by o...

hi,while updating with IDS-sig-4.1-4-S134.rpm.pkg,the system seems to freeze, and never times out. when login remotely and at console, i get the error "Error: Cannot communicate with system processes. Please contact your system administrator." afte...

Hi,Can somebody tell me, if the Half-Syn open will fire only, when the client doesn't send the final handshake ACK or it fires when the server doens't send the SYN,ACK packet too?Can somebody tell me the treshold value-s for this signature? I meen, h...

I have a pix 515e with a VPN set up for the Cisco client. For users on my internal network we have an n2h2 filter server set up to block certain websites. I was wondering if there is any way for users connected with the VPN client to have their web r...

We have a cluster of devices behind the pix, sharing the same virtual IP. When there's a failover in the cluster, a gratuitous arp is sent with the new MAC for the device taking over the virtual IP. As packets need to be routed through the pix to the...

Cisco is a great compnay but I tell you their network management products must be the bottom of their priority.CW2K still is not support on Windows2003 and its almost 2005. I have 2 CW2K servers not that will not backup the configurations of my devi...