Other Security Subjects

While a reflexive acl theoretically can prevent ack tunneling how would one implement that on the Pix firewalls? Is it more appropriate to apply reflexive acl's on the interior routers? This question is in regards to the 'newly released Windows 2000 ...

Hello all, I'm trying to figure out where someone plugged our sensor's monitoring interface in so I can span the port. Unfortunately no one described the interface and I can't find any docs with that info. So I figured I could grab the MAC address ...

I configured a VPN connection (native Windows PPTP connection) between my home PC (Windows XP Professional) and my office VPN server (Windows 2000 Server). I connect to the Internet via a Cisco 827-4V router (IOS 12.2(8)T4) and my ISP assigns to it a...

Does CiscoSecure 2.3(6) for Unix support Oracle 9i?

I have been reliably told a Cisco Secure IDS can actually monitor two switches at once by direct physical connection (Note we are not and will not be using IDS modules in the switches, but physically seperate Cisco Secure system).Unfortunately none o...

I have a user connection to our VPN Concentrator 3015 using the CISOC VPN client but he is going through a Microsoft ISA Firewall. Are there any special configurations that we should be configuring on the Microsoft side. For some reason we cannot con...

I am using IDS Host Server Version 2.0.1 and have installed it on a server with Windows2000 advanced server and Service Pack3. The following message is viewed in the Event logenterceptAgent Failure: Incompatible service pack. Please read the ReadMe f...

My customer uses IDS 4210 with 3.1(3)S31 installed and uses CSPM 2.3.3i.Until 1 week ago there was no problem but he says when he want to block manually some hosts or networks at Router via CSPM Event Viever he gets Error timeout waiting response.He ...

Hi,anyone know if is possible perform router telnet authentication (AAA authentication login radius) with the native Windows 2K IAS radius server.Thanks,Graziano

Well...my question is... the router or firewall (PIX) that is doing NAT and have a access-list applied to an interface.... What the router/firewall will do first?Check access-list first then do NAT afterordo NAT first then check access-list after???

We are having trouble exchanging e-mail w/ another PIX user. This is the only host we have trouble communicating w/. The e-mails usually come through eventually, but there is a long lag (12+ hours). There is no indication of problems at the e-mail...

I have the following at the top of my inbound access listpermit icmp any anyIt's applied inbound in my outside interface, however, I still can't ping anything on the outside........

Has anyone ever seen a situation where the email notification is working fine and then all of a sudden it stops? I have done everything excpept reboot the server to try and solve this. The CSPM box does have full connectivity to the SMTP gateway an...

what do the following errors in the /usr/nr/var/errors.smid mean?::::::::::::::errors.smid::::::::::::::09/03/2002 14:00:59UTC E Cannot write message to director writing to /usr/nr/tmp/socket.director.2708109/03/2002 14:31:23UTC E Cannot write messag...

Hi Guys,We are running a couple of Concentrator 3030 ver 3.6 + Client 3.6.1 using VCA for Client load balancing. The concetrator are behind a Pix 525 running 6.2.2.It all works fine when client connect via PSTN/ISDN or directly attached to the LAN on...