Other Security Subjects

Hello.I have a question about the functionality of the access-list, I tried to blocking some range of internets addresses with acl, but it doesn´t work, I don´t know if I am right about the sintax (I think I do), my acl is the following:access-list e...

If two interface have the same security level then forwarding traffic between the two is not possible (for security reasons). Is there a way to allow a specific service only to be allowed between these two interfaces without modifying the security le...

Greetings,We have a situation where our 3005 concentrator fragments the packet containing its certificate during IKE Phase 1. This happens regardless of whether it's UDP IKE or tunnelled over TCP port 10000. The packet is fragmented using the MTU of...

I have two ISPs (ISP-router-A and ISP-router-B) and a pix between them and the DMZ.I want to use two proxy servers (proxy-A and proxy-B) in the DMZ to bring http access to the users in the LAN (there is another pix between de DMZ and the LAN).Then, I...

I've deployed a new IDS 4250 in an ISP environment. I often find huge amount of such messages in /usr/nr/var/errors.packetd.<pid>E SWEEP.PORT.UDP - Udp Header has bad Dport 0E SWEEP.PORT.UDP - Udp Header has bad Dport 0E SWEEP.PORT.UDP - Udp Header ...

Just curious if anyone has noticed a drastic increase in shunned IP addresses after enabling the SQL Slammer Worm Signature on IDS Sensor?

I am checking the 802.1x features with Windows 2000, catalyst 3550 and ACS3.0. The 802.1x authentication works fine but I am trying that User IP address to be assigned by ACS but it is not working (first, is this possible?).I see on Catalyst debug t...

IDS 4210 v3.1PIX 515UR v6.2(2)Cisco host IDS v2.5I've configured the IDS to issue shun commands to the PIX. Manual blocking works ok. I also see the IDS issue blocking on it's own during an attack. I can verify this in the PIX.However, I also see th...

We have over 80 routers all pointing back to one hub router. We are using GRE tunnels. Do I have to configure a separate tunnel interface for each incoming GRE tunnel on the hub router? Is there a way to set up one tunnel that receives from multiple ...

Will squid work with IOS FW for http urlfiltering:. From what I've read on the subject, the vendor N2H2 speaks a protocol called "Internet Filtering Protocol," so I guess I need to know if squid can speak that protocol. IOS also supports urlfilt...

I have a question about Vlans. I have a client of ours that is a catering hall/business/hotel. They have 4 rooms that will be setup with Internet access. My question is, can I setup up a vlan, so the rooms can not access anything but the internet? Th...

May I have to know Cisco will support IDP solution in further development? More security vendors have already launched their IDP appliance, such as Netscreen, Top-layer, Symantec and SunScreen....Thanks.Regards,Dennis.

Hi,I'm using CSPM 2.3.3i to manage IDS sensor 3.1 with IOS router for block malicious attack (shunning), but how can CSPM configure to send notification to administrator, then tell them what IP address(es) were blocked by ACL at that moment? And can ...