Other Security Subjects

I need some advice on how to solve problem with PDM v.2.0(2) running on PIX-525 ) which couldn't run properly.Using the web browser (IE5.5), I can only access the "monitoring" tab but not the other options, e.g Access Rules, Translation Rules, VPN,...

I would like to appear for the security exam but do not have the required material for CSIDS self study. Please suggest sites or links from I can download the material to do self study and appear for the exam.Thanks for all the help extended by the f...

All I am in need of help. We have a Cisco 3030 concentrator that does not proxy arp for the clients ip addresses that we give out via Cisco ACS radius.Internet router-------Checkpoint-------3030-----ACSThat is a simple look at how it is setup. The co...

Configuration: Clients using personal routers (Netgear, Linksys, etc.) doing 1 to many NAT connecting to a 3060 will drop the first VPN client connection when 2nd VPN client connection is initiated. 3060 Concentrator is running 3.5.2A and is NOT conf...

I want to set up VPN between routers with digital certificates. I'm using MS Win2000 CA service with SCEP protocol fot CA role. I tried several times to enroll certificate from CA but all of these was unsuccessful. I didnt see any certificate reques...

I am having a problem with CSPM. The WinNT 4.0 server that it is running on locked up and had to be power cycled. This could possibly have been because the alarm database had gotten too large but this has never been a problem in the past. The machine...

I am wanting to test the auto-blocking features on the ids. I have successfully configured the device to do MANUAL blocking in which in adds ACL's to a cisco IOS router, and works great. I am interested in the auto-blocking, which no human interventi...

I have a customer who is having customer timeout/locking issues. The database server is in front of the firewall and the client is behind. In around 10-30 minutes the client will lockup and stop working?Any suggestions the we can change on the firewa...

PIX 515 with 6.2After creating translations to the inside network from the DMZ and applying access lists to the DMZ interface, the hosts on the DMZ can no longer access the outside interface. How can I allow these hosts access to the outside interfa...

hi i have a beta of the new MDC for IDS and i have an old IDSM 2.5 and and i integrated it in the MDC but i need to be in release 3.0 and i don't have a cspm to update it Is it possible to update the idsmm directly without CSPM (i don't want to set a...

I have a production 3030 that plug in to a VLAN on a cat 5500 and I loose tcp/ip to the private interface at lease once a day. I have looked at the 3030 MIB2 ethernet stats and there are no errors or colisions and the 3030 private and the cat 5500...

After installing the latest CSPM with (CSPM-2.3.3i-S29-exe.zip) to support an IDSM with 3.0(5)S23, the version 3.0(5)S23 is not selectable in the "Sensor Version" pulldown in CSPM.If you view the sig.dat file for CSPM-2.3.3i-S29-exe.zip only the foll...

A customer has sensors north of a VPN where all traffic is encrypted ESP traffic. Is this sensor able to detect attacks? I trying to determin if it would be better deployed south of VPN.

Is there a way to log traffic for an IP address on the IDSM Blade just like it is done for the stand alone sensors. I do not see a tab for "Ip logging Addresses" on my unix director.

Can someone give me some real world experiences as to the advantages of the IDS blade for the 6509 vs the standalone boxes? Also, how far behind is the 65xx IDS blade from signature updates? It seems on CCO they go a month or more before updates, whe...