Other Security Subjects

Hi,Customer has removed a static NAT entry and replaced it with a new one - uses the same original destination but a new NAT'd destination. "clear xlate" removes the old entry from the xlate table, but as soon as anyone attempts to access the host, t...

HiI have created a rule which looks like: "CERTUSER <-- issuer-o="siemens".I can verify, that my certificate contains this "o" field. In matching policy I activitad "match group from rules". Even though the client can't connect to my vpn3k. In log I ...

I have a 3662 router with have two ISP connections with BGP4, one port for my intranet (2 VLANS) connected to a catalyst switch, another port for DMZ, and T1 for VOIP. As you can see this is my main (gateway) router. I am running the Firewall IOS o...

Please find my nat and global commands below. I want to translate the IP 204.142.253.55 / 24 (vik) to 190.231.232.135 / 27 (one of the ISP assigned public addresse)Pix-Admin1(config)# sh globalglobal (outside) 1 192.231.232.135 netmask 255.255.255.22...

Hi, One of my customers bought an IDSM 1 recently. I an trying to figure out:1. Is there a way of managing the hard disk space on this blade, I mean using command line? I would like to look at the log files, monitor the hard disk etc.2. Is there a do...

I have set up an IDS-4210 (Ver 3.1(3)S42) and a PIX-506 with blocking. I have verified that the shunning does work by adding manual blocks in the IDS and verifying them in the PIX.Is there a list of critical or common signatures to trigger a block? A...

as the tittle says,I have configured my pix, and all my workstations that have an intrenal ip can go out to the internet, but all the machines that have a nat on the pix cannot go out the the internet..any ideas???thanks a bunch in advancecheersDamie...

hi engineers ,could enyone get my some information about offensive use of IDS ,althought i search over internet and found something like passive and active IDS and related offensive use of intrusion detection (not of course cisco or sth specifical)....

We are using Cisco 831 routers at our remote locations to provide site to site VPN connectivity back to our data center (full tunnel). At our data center we have a pair of Cisco 2691 routers running in a High availability configuration using HSRP. ...

I have a 501 implemented between a host and an ISDN modem. The modem hands out DHCP info to the 501 outside interface on a 192.168.1.x network. The 501 hands out DHCP info to hosts behind it. The 501 has a VPNClient config back to a 3005 concentra...

Hi,On an IDS sensor, using command line, how do we find out what kind of a box are we on? I can find out the OS, but the hardware model of the appliance?Also, does the event virewer and IDS sensor forget each other after a period of inactivity. I fin...

I want help from some one who know how to minimize the DDOS attack . I have 4 MBPS circuit and both links are overloaded with DDOS attack. On my boundry router i applied TCP sync list and CAR but still my network is out of service.Any one who can hel...

My network is under severe DDOS attack and link of 4MBPS is choked. Users are unable to get services.I applied TCP sync,CAR and Antispoofing ACL on my boundry router but all in vain.Any one who can help me out.Thanks,Shahzad Rasheed.

I'm looking at the Interface Outside (and Inside) - Bit Rates graphs. I'm a little unclear as to what consitutes Input and Output for each interface. For example, on the outside interface, does input refer to everything visible on the outside netw...