Is there any way to configure the AS5300 to disconnect ppp connections already established if there is appropriate attribute concerning login-timeouts set in the Radius server.Any help would be appreciated
Is the NSDB database available online? I currently get e-mail from my IDS Systems (NetRangers) and in the e-mail I get the SIGID# and SUBSIGID#. However, I would like to be able to look at the NSDB from my desktop. I know that one solution is to inst...
We found a significant volume of out-discards for the SPAN ports of some of our 4230 sensors. The ports are 100 Mbps full duplex. Does it mean that the sensor cannot keep up with the traffic, and is there anything we should do to fix it? I did not...
I am trying to add an outbound access list rule to permit ftp from a specific host. No matter what I try the rule in being appended to the list of rules such that it comes after the default deny all policy. Any ideas? Your help is greatly appreciated...
Hi Guys,I have some questions regarding CBAC.We have a customer with live CBAC installation currently running and working in one direction doing basic auditing for TCP and UDP, with no returning path access-lists in place, only a permit any any outb...
I'm getteing alerts for SigID 3110 and when I look at the alert's context buffer, I see the mail attachemnt that was sent contained a ".scr" extension. According to the NSDB and the Cisco Secure Encylopedia, this alert should fire when a mail attach...
Hi, we have applyed IDS4210 for internet connection, we use the IDS with 1760 router. We have created custom string signature on the IDS. IDS can reset many unwanted e-mail connections (port tcp 25). But some of them (unwanted e-mails) can reach t...
I use a 827 to connect to internet (with nat overlaod).The connexion gives a public IP address. I use a private Ip address on ethernet0 on the router and another one on the outside interface of the pix.I have two other Public IP addresses.I want to u...
Dear All:Can I filter accounting packets before it send to radius server , I want to filter a packets according to destination address if on of my client access a specific destination I want to deny accounting packets to be send to radius server .
I have a 4210 sensor behind the PIX firewall. I have had just a few alarms so far and of course they come from inside the network. An example was a 5232 when and internal private address was accessing a website. I understand what would be happening i...
I have a vpn3000 concentrator and use vpn client 3.5.2a. When the users connect via remote access everything works fine, full conectivity everywhere. However when i create a tunnel from the internal office while connected to the local LAN, I can crea...
I have a DMZ (off the DMZ-port of the PIX 525 firewall) with the customer routers sitting there. We are using dynamic NAT and static routes on the PIX-firewall. The application we run is FTP - out to the customer servers. The PIX has static ip route ...
