Other Security Subjects

Good day.I'm sitting with a problem where IDS on our perimeter router is stopping ftp. When I debug IP PACKET I get "IP: s=x.x.x.x(Ethernet0/0), d=y.y.y.y(Serial0/0), len 112, dropped by inspect". Here is my Serial config:interface Serial0/0 bandwid...

Everywhere, also in this forum, I found people claiming that Cisco routers does not support PPTP through PAT. So I was renouncing to make my VPN connection (native Windows XP PPTP VPN connection) working.Then, today I found this article http://www.ci...

We are running a site to site VPN between 2621 and 7204. In addition users can log into our network using Cisco unity clients through the 2621and getting authenicated on RSA server placed at the 7204 end. These remote access clients will establish dy...

Hi,Is it possible to modify the banner we received on the navigator with a customized html page ? (for exemple by adding some company logo or comments).ThanksRegardsFrancois

When I try to implement shunning I get the following:0/16/2002 14:02:15UTC E Net Device offline at address [1.1.1.1] State [Connecting] SubState [Initial], resetting now.10/16/2002 14:02:59UTC E Can not set send bufsize on socket10/16/2002 14:02:59UT...

Should access-lists configured on a router respond to UDP traffic with an ICMP response packet?

I need a cookie cutter config for IDS, with explaniation of what is up...please help

I am new to the PIX, coming from a different brand firewall, so please excuse my basic question: Without using a 3rd party product (such as Websense) is it possible to filter by extension (ie. block downloads of .jpg, .mpg, etc. over port 80)? I ca...

In order to block specific outgoing access on a PIX I am doing the following:access-list acl_in deny tcp any host 1.1.1.1 eq 80 access-list acl_in permit ip any anyaccess-group acl_in in interface inside The above does successfully block my inside us...

Anybody using Management Center for IDS Sensors 1.0 and Monitoring Center for Security 1.0 on Windows 2000 yet? Please share your experience. Does it crash frequently like CSPM?If you aren't aware of the product yet, here's the dox:http://www.cisco...

We received a CSPM CD from Cisco, and when we tried installing CSPM, the only option was "Install Demo". "Install Product" wasn't there. We installed the Demo and tried to upgrade the license, but got a message "Demo version couldnot be upgraded". Un...

1. what is the default authentication protocol for GRE?what other are supported ?2. Is authentication must be first performed for authorization in AAA3. the feature of Kerberors that is not supported by Raius or Tacas+ is ?des for telnet or single lo...

I am getting this error from an upstream router. How do I fix?

We have a PIX 515 and I've setup the following access-list:access-list acl_in deny tcp any host x.x.x.x eq 80access-list acl_in deny tcp any host x.x.x.x eq 443access-list acl_in deny tcp any host x.x.x.x eq 25access-list acl_in deny tcp any host x.x...

I recently installed a IDS 4210 and upgraded the software from the included CD (version 3.0(5)S17) to version 3.1(3)S33. When I issue the "idsvers" command, or attempt to retrieve the device status via the web interface, a timeout error is displayed ...