Other Security Subjects

I have configured an IOS router with CBAC/Firewall. I have configured an outbound inspect on the external interface, which adds the appropriate entries for return packets from the internet. And accordingly, I have an inbound ACL on the external int...

Hi all! Trying to configure CBAC on 2610 running IOS ver.12.2(2)T. My Cisco reseller insists my platform supports the Cisco IOS Firewall Feature set. However, whenever I issue the command ''show ip inspect all'' to verify the CBAC capability, the out...

Hello,My router has a serial interface and an ethernet interface. The serial interface connects me to my ISP and the ethernet interface to my local LAN. I only have an access-list (IN) on my serial interface. In it, all incoming access is allowed fr...

hi, i'm building a campus lan and the strangest thing happened to me.i can ping a checkpoint's inside interface (windows box) from any box in the network (ANY BOX, namely PC's, Catalyst catOS switches, you name it) except for a box running IOS sw. ha...

is there a way to block mp3 downloads with a PIX firewall?

Hi All , We have a typical scenario where in the setup is as follows ...Internet --> 256 K leased Line Cloud -----> Perimeter Router -->Pix FIrewall--> LAN + Web server ( on same local subnet )So on the LAN we have all the clients that access the Int...

I am experiencing problem, after the sensor and CSPM signature updateto 3.1(3)S36, I received over 300 CSIDS Alarms " No traffic flowing for past 90 seconds on fastethernet interface" per day.

My issue is related to an application on a server engine that has problems understanding the normal TCP KEEPALIVE poll from the CSS. I have the keepalive configured for TCP but when the CSS polls the server engine the application on the server engin...

I have an IEV 3.1(1) S34 receiving alarms from a 4210 appliance. I am seeing some "DNS High Zone Xfer" (ID 6952) signatures but I am not able to see the "Expand whole details" option.I do right click on the main View and "expanded details dialog" ap...

I have configured a PIX 515E to purely serve as a VPN concentrator for remote users to connect to our LAN. Most of the remote users have some sort of personal firewall on their laptops such as PGP or ZoneAlarm. Once these Personal firwalls are prop...

I want to know how can one exclude Alerts with 0.0.0.0 IP address on the director. RegardsTT

We have a resident student network, which coexists with the rest of the campus network. I want to keep the students behind the firewall (less likely that machines get comprimised) but I also want to keep them isolated from the rest of the internal f...

I have a 3005 set up at a central sitei recently set up a testing group to test pushing down split-tunneling and firewall policies. I debugged the output (using Log Viewer on the Cisco Software Client) only to find that the Client is only negotiating...

I am looking for the best practice configuration for Firewalls with Citrix MetaFrameXP.Any ideas, comments, suggestions , please feel free to reply back.Thanks in advance for helping out.