Other Security Subjects

I am trying to stop users from outside our network from using our cacheraq. We have a Sun Cobalt CacheRaq4 running and it doesn't allow changing the config files to stop other networks from coming in.I have the following access-list and would like t...

I am having a problem getting my IDS to see any packets coming from the SPAN port on my 2950 switch running IOS 12.0(5.3). Although the span port light is blinking like crazy, and I know 35 Mbits of data are flowing through the monitored ports, all I...

Hi , Can anyone help me in VOIP accounting as how to configure on the acs .i have acs 3.0 in my clients place.The documentation in cco is not very clear.rgds,pkb

We currently have a default route pointing to a pair of PIX firewalls running in failover mode. We have added another pair at a DR site and want to add a second default route to the second firewall pair. However when the first firewall pair fail, the...

Can anyone recommand a Radius server, we have a Cisco VPN 3015 & using the internal database which limits adding users at a 100. I don't want to use NT and like the functionality of Radius. Cost is an issue, I have priced Cisco ACS at $6000, Funk at...

I'm wanting to enable the ability to FTP through our firewall but only if the request was made from the inside. The previous admin removed all FTP options because he said that's how the website got hacked. Now that he is gone I'd like to allow it a...

Lets say for example....my 515E config looks like such...nameif ethernet1 inside security100ip address inside 199.199.199.1 255.255.255.0interface ethernet1 autostatic (inside,outside) 199.199.199.0 199.199.199.0 netmask 255.255.255.0 0 0And I change...

I'm trying to use NBAR in a way that a reverse proxy server would accept specific documents or headers for packets destined to a http server on the inside of my network.For example: I have a router with two interfaces.. Outside and inside.I have a tw...

Anyone have a NIDS signature for the W32/Elkern virus ? I understand it is typically a payload for the W32/Klez and W32/Klez.h viruses, but I'm interested in alerting on the Elkern virus specifically. Anyone have one? Is Cisco going to release one...

A customer uses several access-points (350) and each has several connections towards clients (win 98 /2000/XP). This customers wants to control the maximum bandwith per client (winthin 1 access-point) The idea is to use ip-sec and terminate it into a...

Hi,I tried yesterday to send log on a Kiwi Server on a DMZ, on port TCP 1468.First I didn't get any message then the PIX stopped to allow any connection -> I got the message (on pix, buffer), PIX Disallow any connection, I had to stop the syslog ser...

Hi,i need to put an ACL for outbound on a router 806 with PPPOE/ADSL.I try this, for example :access-list 101 permit ip any any loginterface dialer 1 ip access-group 101 outI remark :1 - when I ping from my PC on inside (by 806' interface etherne...

Hi all,I have a PIX and 1 external IP to internet. And I have 1 SMTP server and 1 WEB sever in internal network. Can I use just the 1 ip address for the two servers with NAT? (because the servers use different port)Thank you very much!Best RegardsTer...

I need a list of some none well ports,that are used in some chat programsEX: Messenger,ICQ,Odigo...etcalso I need to know ports of peer to peer sharing programs .....EX: Kaza ,iMesh.....etcso can you inform me for a resource to know these none well k...

I was running some scans against some of my pix 515's and 2651 routers with Nessus (www.nessus.org), and it told me the following text: general/tcp (Security warning found)"The remote host uses non-random IP IDs, that is, it is possible to predi...