Other Security Subjects

I am getting land attacks from an ids listening to the outside interface of the pix. Now, this may be a no brainer, but the packets triggering the land attacks match the MAC address of that outside interface. I have no alarms on the PIX however.Now, ...

I have a VPN between two IOS-routers there one of them gets it's address dynamicly from the ISP. Now I also want to use VPN3000-clients to connect to the router with the static address. Is this possible? Can I have double dynamic maps? Is there any c...

hello all, I have written a firewall to deny dhcp requests from another subnet. The actual ACL is listed below...access-list 101 deny udp any eq bootpc any log(it's then applied to an interface)interface FastEthernet0/0 ip address x.x.x.x ip dire...

Hello,I would like to limit an ip to be able to reach snmp and query it but only able to get serial interface and e1 controllers, up or down status. How can I limit this specific information?Thanks

Can someone explain this syslog entry? Both of these addresses are foreign to my network. Why would my firewall get a packet destined for 143.166.83.205 when that isn't within our public address range? In fact, how did this packet get past our rou...

Hello,We need to setup a VPN in front of two servers, but in the middle of a VLAN, due to management/support/bureaucratic issues. The VPN is only needed for remote access (i.e. outside of VLAN), and the rest of the VLAN would hopefully be able to pas...

I need to upgrade to 12 Meg RAM on a Cisco 801 in order to run the IOSIP/FW PLUS IPSEC 56 feature set (so I can VPN tunnel to another PIX).When ordering I noticed that the product comes with 4 mg RAM and 12 mg Flash.How many slots for DIMM are on t...

Hello,We have a LDIR 416, 4 Webserver (s1 to s4) and want to use roundrobin.Is it relevantly which server is defined first in binding command in config.See config fragments below.Thanks Ruedi------------------------------url s1 http://www1.skandiaban...

In case anyone else has been hit by this worm.It looks like if you block port 1434 it will stop the worm from spreading or infecting the network. Of course, make sure you have no enterprise apps utilizing this standard sql monitoring port 1433 and ...

hi ,I've been trying to block access to Kazaa . I used and Outbound Deny on port 1214 for both TCP and UDP. I also put in an access list which read ...access-list 110 deny tcp/udp any any eq 1214 . Also , I was killing any sessions to and from Port 1...

Question:My router is doing both static NAT and dynamic from a pool of public addresses. When I execute a sh ip nat trans command, the output shows most of my Inside local and global addresses, both static and dynamic, with a a following tcp port of...