Other Security Subjects

Hi.I've installed an ACS 2.3(6.1) demo over Sun platform. Everything works right but when I select Cisco Secure Administrator option, after I click on 'Advanced link' and then appears a window with this message 'Security error'I don't know the reaso...

I just installed one 4210 IDS Ver3.1.3 with IEV for customer, There are two questions came up after the installation.First , From the IEV, When I view all the events, there is no timestamp associates with each event, How could I enable the timestamp ...

With DST about to end I want to make sure that my sensors time/time zone is set correctly. What is the correct procedure for setting the time and appropriate time zone on the sensors?

i have PIX 515, the problem is that all nodes configured inside are working fine with the outside (internet). but when i try to connect (ping one node from another node (both are inside) i couldnt...)Host 1 and Host 2 : are inside (10.10.10.1 and 10....

Hi all,I read on the 6.22 release notes that the bi-directional NAT is implemented on a PIX Firewall, does anybody try it? This is my test but it doesn't run, can you help me?LAN inside 10.0.0.0/16LAN outside 20.0.0.0/16 inside ...

Dear Mr. Expert, If I have a static NAT command below :static (gprs,outside) 64.124.233.10 192.168.4.5 netmask 255.255.255.255 0 0 Can I say that Internet users can access 192.168.4.5 (a private DNS server) via the global IP address of 64.124...

Anyone know what this is?Thanks in advance.

I have a 3640 connected to a ISDN30 to allow remote users access to the network. All the users are authenticated via Cisco ACS 3.0, I want to allow the remote users access to only a selected number of servers. On the ACS I have defined a Network Acce...

I need to do GRE thru a PIX. I looked at the following article: http://www.cisco.com/warp/public/707/gre_ipsec_ospf.html. I see something here that might be a problem. The GRE tunnel is being created over the Internet. However, each router referenc...

Hi all,According to the following document http://www.cisco.com/warp/public/556/5.html the NAT translation is done in “between” ingress and egress ACL.So, does the egress ACL rules refer to the NAT ip addresses (after translation) or to the original ...

I am looking into deploying cbac and wondered if there is a way of running it in monitor mode to get a good idea of "normal" traffic patterns. This would give us a good chance to write and verify key service acl entries before we change our acls over...

I am trying to stop users from outside our network from using our cacheraq. We have a Sun Cobalt CacheRaq4 running and it doesn't allow changing the config files to stop other networks from coming in.I have the following access-list and would like t...

I am having a problem getting my IDS to see any packets coming from the SPAN port on my 2950 switch running IOS 12.0(5.3). Although the span port light is blinking like crazy, and I know 35 Mbits of data are flowing through the monitored ports, all I...

Hi , Can anyone help me in VOIP accounting as how to configure on the acs .i have acs 3.0 in my clients place.The documentation in cco is not very clear.rgds,pkb

We currently have a default route pointing to a pair of PIX firewalls running in failover mode. We have added another pair at a DR site and want to add a second default route to the second firewall pair. However when the first firewall pair fail, the...