Other Security Subjects

I want to create a user who has the access to sh running config and extended ping but can not modify the config. How to do that? I have tried with 'priviledge exec level 10 more system:running-config' but after that in 'show runn' the output is blank...

Some TCP traffic (ssh and Telnet sessions) get reset when allowed for some minutes through our PIX 520 image 6.0(2). Going though Cisco bug sheet, I found out this problem belongs to bug: CSCdr11711 which should be resolved by upgrading to 5.0(1) or...

I am currently required to design an IDS layout for a future e-commerce server farm. The network will be built around a Cat6513 with 3-16port fiber blades. There will be 3VLANs. I obviously want to monitor all 3 VLANs, but my dilemma is this:The C...

Hi All,I have a Cisco 1721 Router configured as an EzVPN Server and trying to connect using a Cisco 3.6.3 VPN Client.The problem is that i get connected fine and also get a IP Address. The remote Subnet also appears in my Cisco Client , however i can...

I am looking for info on how exactly this command works and how to use it. For example: Is it needed on both end devices of an IPSec tunnel or just one? Do the parameters on either end need to match? Are there any general guidelines or "rules-of-...

I have recently purchased two Cisco PIX 525R's and am looking to implement Intrusion Detection on them. Can anybody give me some basic advice in how to go about this as it is new to me?Thank you all very much in advance,Daniel,

When Defining Protected Hosts, in the IP Address field, should you enter the external and internal addresses? For example, we have a SMTPserver with an external address of 209.99.88.18, and an internal address of 10.10.1.15... Our Threat Response Ser...

When I SSH into my IDS 4250 how can I determine the version of the IDS software?Thank you!

Sorry for another complaint but today I've got signature 5160 fired:205.150.179.NN <- 208.51.1.102 (5160) Intrusion alert: 5160 Apache ? indexing file disclosure bugsame time I have 5160 filtered for this specific IP on IDS sensor:5160 * False * 205....

This is not really a Cisco post but I figure there should be someone out there that might have run into this problem.We are running Microsofts ISA server and using it as a proxy for approximately 3000 users going out to the internet. The proxy servi...

I have a web site protected by a set of PIX 515 that allow ports 80 and 443 to the web site. This site works fine for almost all users for both http and https. However, AOL dial-up users get a server not found error only only when they try a link tha...

hi, when we configure the IKE phase one, many values needed to be configured like DES, MD5,Pre-shared keys and DH1. I just want to know how the values are used during the IKE phase one.For examples, the pre-shared keys are used to authenticate each...