Other Security Subjects

Here's the situation:I would like to put my VPN3000 behind my 'DMZ' int. on my PIX. Big problem - traffic coming out of the 'DMZ' is NAT'd. Is there any way that I could put this concentrator behind this interface without removing the NAT command fro...

Anyone now how to create custom signatures for streaming audio and video? I would assume that I could create custom connection signatures for specific ports for each of the streaming services (i.e. RealPlayer, PointCast, etc...), but I was wondering ...

Are you guys supporting IDSMC in here yet?

The Standalone Appliances has new Signature coming out every 2 weeksHow often does the Hostbase ids signature get released ??regardsPer

I know that the static statement is used to access a higher security level interface from a lower security interface. Also, if you want to disable NAT you use the formula static (high,low) high high. I have used the same formula with the static com...

version 6.(1)we want to use Microsoft TS from any location on 10.13.20.0 to access servers on DMZ1 10.0.1.x for administration purpose;What would be the proper access-list to use ?Thanks

As I wrote in a posting before, we have problems with dropped packets. Checking the log files, I found that the problem appeared right after installing servicepac IDSk9-sp-3.1-2-S23. On other maschines we do not have any problems with this servicepa...

We have a sensor that is reporting "Missed packet count" events. Can someone please post an explaination of this event? It does not seem to be on the Cisco web site or in the NSDB

Here's a what if question-->What if my PIX config had 'stray' conduit commands within...conduits that permitted access to certain IP's that no longer existed within my infrastructure...i.e. removed machines. Any negative impacts?

I have a client with two Cisco 7120's that are connecting two branch offices with a IPSec tunnel encryped with DES. Because of new security standards they need to be upgraded to 3DES. Since neither router currently supports 3DES, what will I need t...

I have a configuration where NAT is disabled between an inside and an outside interface, using the "nat (inside) 0 access-list" command. If I apply an ACL to the outside interface which permits access to resources on the inside interface, then it app...

How can I get the newest IDS signature upgrade?

How would Cisco IDS Sensor detect a DoS attack on a traffic which is SSL encrypted. In case, it is able to do this, is there any specific signature requirements ?

I have a PIX 515 with three interfaces (inside, dmz, outside). On the outside interface, access-list 101 is applied to allow traffic from the internet to a few hosts on the dmz. On the DMZ, access-list 102 is applied to allow some DMZ hosts to comm...

How do I change Read Only file System into Read/Write File System while Upgrading IDS factory default IOS.