Other Security Subjects

I am trying to implement a pix 515e in stages. I am able to put our exchange server behind the firewall and access it from outside, but I am having problems seeing it when on the same network as it. This is do to not being able to resolve the email s...

I am looking to increase the bandwidth of our firewall, a pix 520. I currently have a 100Mb interface and wondering what options there were as far as gigabit interfaces or adding some more 100MB interfaces to help carry the load. Thanks

I am using filters "by signature" name in order to exclude a great deal of signatures of the Event Viewer screen. I will need to install several EV all of them with the same views and the same filters.Is it posible to exports the filters created in o...

My Syslogs are getting flooded with the following message:%PIX-3-305005: No translation group found for udp src outside:62.153.65.203/62431 dst dmz:213.61.190.1/53Now according to the PIX syslog messages it means:%PIX-3-305005: No translation group f...

Lots of posts on in-depth technical questions on this forum, while mine is a lot more generic. As a service provider we manage many seperate customer networks, some internet connected, some not. We have been looking at several IDS systems for a while...

I was wondering if anyone knows of any shell scripts or other tools designed to quickly trace an IP address to a particular switch, module/port. I've had cause to track down a large number of systems in the past (as a result of worm/virus activity)....

Is it possible to schedule the "IDS Reports", like Top Alarms, Top Sources of Alarms, etc?I am able to schedule Summary Reports, Detail Reports and System Reports using the CSPM reporting tool, but I doesn't allow me to define new IDS Reports or sche...

We are having a problem putting an Exchange 2000 server in a DMZ on a PIX 525. We have opened all ports tcp, udp and icmp to all servers on the inside. The Exchange server passes all the netdiag tests and appears to be able to communicate. However, t...

For VPN3005 and 3015, there is a limitation for creating an internal users database. According to the spec, "100" is the upper limit for users+groups. It means that at least we have to have ONE group , so the limit to be able to create internal users...

Hello,I have got an Exchange 2000 front-end/back-end configuration where both servers are on seperate interfaces of a PIX 515. The front-end is on a lower security level.When I use PIX IOS 6.1.1 everything works fine but when I use a later version of...

Depending on the %PIX-3-201002 message I've tried to configure nconns. using the following syntax:static aaa.bbb.ccc.xxx aaa.bbb.ccc.xxx netmask 255.255.255.255 nconns econnsUnfortunately w/o any success. May somebody know how to do that.

I have a 2621 router with FW software on it. What is the best IDS implimintation/practice to have router drop all incomming SYN's DDoS SYN Floods attacks. I dont want the route only to look at access-list ip and block them. Thank you

I actually have a Cisco 7200 series router for VPN tests.I want to start with IOS 12.2(t) and a SA-VAM. The SA-VAM is not recognized by the router (Please have a look at the log). How can help.....IOS (tm) 7200 Software (C7200-IK9O3S-M), Version 12.2...

i have 2 questions with IDS1: is IDS has signature that can trigger any SQL Injection state2: does any tool that can received IDS log and can used a disgram to analysis the reportThank you help

I have a single PIX setup w/ only an internal and external zones. I was wondering how long it should take me to install and configure a 4235 IDS behind my PIX. I am curious and would like to monitor if any attacks are actually getting through my PIX....