Network Security

I have a test ids executing a shun to a PIX over ssh. We see the signature fire, the sensor status shows the ip address of the offending host being shunned, and a time limit of 15 minutes which we have set. On the PIX, we see the ids sensor logged ...

Has anyone else noticed the Chemtrails in the side picture of the PDM 3.0(1) Startup Wizard?Are they suppost to be Chemtrails? or something else entirely? perhaps something artistic?CheersRob

Hi folks!We're a small company running a PIX 501 device as our corporate firewall. We have a DMZ set up inside our firewall, with the bulk of our internal network being behind a Linksys router - we have a webserver sitting in the DMZ at the moment. O...

Hi there,I'm looking for a method to match packets on their specific length and either deny or allow them out of the interface. I know router IOS supports it via policies and 'match packet lenght' command. So far I wasn't able to find anything of thi...

I am implementing a hub and spoke VPN with 30+ 831's connecting to a central pix 515 using ezvpn. 831's are in network extension mode with split tunneling and each with a non-overlaping private subnet (192.168.x.x). Connectivity is working fine, but...

Will Split Tunneling work when using a VPN3002 Hardware Client in Network Extension Mode? I have enabled Split Tunnelling on the 3030 Concentrator. It seems to tunnel the correct networks but it doesn't send the networks in the bypass list to the int...

We have a 515 with 1 outside, 1 inside and 3 DMZ’s. We want to allow some of the hosts on the DMZ’s access to the Internet using PAT to the outside interface address. However I can't get this to work.The DMZ interfaces have inbound ACL’s defined to a...

What is the best s/w for pix logfiles analysis...?I need a professional one.....

What is the best s/w for pix logfiles analysis...?I need a professional one.....

What is the best s/w for pix logfiles analysis...?I need a professional one.....

hi,I have enabled ip audit on my pix. I get some information logs but now I can't find anything on this site regarding the signature ids.I know that there are around 55 ids but what are those? is there any link with a description of all 55 signature?...

Dear All,May I know if NBAR can effectively identifiy all BT traffic(or other peer to peer applications). Can it identify BT traffic if it is not using well-known port ?thanksEric

I am wanting to place both call managers and our unity servers behind our firewall, but I need to know what to put in our PIX 525 firewall to assure that the proper ports are open for our IP phones to access these servers. IOS on the PIX is 6.3(4). ...