Other Security Subjects

Hi,I had a few messages logged in my firewall as%PIX-2-106017: Deny IP due to Land Attack from x.x.x.x to x.x.x.xI want to understand that how did these packets managed to get to our firewall, when the destination address of the packet is equal to th...

This is a VPN client to PIX connection, i have this connection without NAT-T, and it's connecting without any problem. VPN Client 3.5.2 and PIX506 ver 6.22Today, i upgrade PIX ver 6.22 to 6.31 for NAT-T conneciton. VPN client is only behind a PAT rou...

Can anyone tell me the difference between the CBAC and Reflexive Access-list. Their purpose look identical to me, but the commands are different.Any help would be highly appreciated. Thank you. Mohan

Hello, I'm trying to install the latest signature update IDS-sig-3.1-3-S42.bin. But on the release notes it stats that the update can only be performed on version 3.1(3)S31. I have downgraded the sensor to version 3.1(3)S33 but I can not uninstall ...

Some advice on blocking instant messenger ports would be very helpful. I believe that a deny on 1863 tcp and udp will handle MSN. Am I coreect on that and what other ports need attention for such as AOL IM?thanks

I have a 506e and I would like to forward all SMTP and POP3 traffic to our Exchange server. The IP Address of the unit is 192.168.1.1. Can someone explain to me how to set up a port forward for this unit.Thanks in advance,Tripp K.

I have a static mapping on my pix515 latest version,static ( inside,outside ) 194.x.x.112 194.169.x.112 netmask 255.255.255.255 0 0Am pretty certain all my pix config is right as regards interfaces , access-lists etc. but cannot get inbound nat mappi...

Hi,I've setup a schedule backup of MDC that occurs every day ( occurence of 999). I try today to stop the backup but there is nothing on the backup page that shows the current setting rule applied and how to stop it. I tought that setting a new rule ...

1:where is the e-mail alert setting menu on IDM 4.0 ?2: i want to prevent port-scan , can I config on my IDM 4.0 (I mean which signature)??

I have upgraded to VMS 2.1 and have a question about event notifications.My old CSPM was able to generate USEFULL e-mails about alerts.The new Security monitor has a lack of good keywords. and does not seem to be able to even give me the signature i...

Hello,in Germany and many other countries last weekend the DST has begun. As far as I know in the U.S. there is a different time when that starts. For me it seems that the VPN 3000 concentrator is not aware of that. The time is 1 hour wrong. On route...

If I have multiple routers and I need to encrypt the traffic between the sattelite offices and the corporate office pix do I need a different key on each router? And if so can the Pix 520 running IOS 6.2 use more than one key?Thanks for the help.

I was wondering if anyone who did manage to get the beta of ver 6.3 was able to send me a copy. I do want to try out this before going for the release. Also if there is documentation on the new version's features beside the main pix os page would be ...

Hi,I am running HSRP on my internal lan with the inside ethernet interface of my firewall on the same lan and plugged into the switch. There are 2 cisco routers - all wan links are terminated on Cisco1 and isdn is terminated on Cisco2. The active d...

I can't seem to get the pruning utility to work. I keep getting this message:IDS Purge Error: SybaseESql::connect: Specified database is invalid The command line that I use is "IdsPruning -r"alert,syslog" -c10000" Anyone have ideas???