Other Security Subjects

I have come across a scenario that I have been searching for some reference material. An access-group is applied to an interface(in), but there is no access-list configured. On one side, someone has mentioned to me that the access-list is implied and...

I've configure a PIX using IPsec (ESP-DES) and ISAKMP with a NortelContivity device.Between the equipments a router configured with NAT (Cisco 3620)translates only addresses through a static one-to-one nat rule.It works fine, but I need answer to one...

What is the easy to block sharing type service and MP3 transfers?

I have a PIX 515 setup as a VPN server and am using W2K as vpn client. The problem i'm having is the client can't browse to shared folde in the network. From the client I can Authenticate using L2TP?IPSEC and if I try to browse the network using UNC ...

I would like to know what you have to configure to get ISDN PPP start stop accounting send to a RADUIS server. We've tried almost every configuration, and it seems the Cisco router (3640 with IOS 12.1.8a) doesn't send start stop records.

I have one CiscoSecure as my primary access server and a second CiscoSecure access server set up as a backup server over the WAN .can my router point to the secondary tacacs for authenication ?or it can only point to the primary server and if the pr...

We are planning to order CSPM for management VPNDoes anybody implement it successfully Could anyone share the CSPM experience to me

I have taken on a new position that requires maintaining/configuring three PIX 501 VPN routers. I have never done this before and nobody seems to have a clue where the book/manual for this router is. I understand that they configured them by telnet...

We have a VPN Concentrator 3005 and Four servers with real IP assigned. We need to allow external Cisco VPN Clients to use One server out of four only. At the same time, we need to allow other normal external users to access the remaining 3 servers. ...

I'm running an IPSec tunnel between 2 routers. ISAKMP authentication is based upon certs. The certs are created using SCEP to a Microsoft CA server. The tunnel is working fine, except that it get error messages like "%CRYPTO-6-IKMP_UNITY_BUT_NO_OU_IN...

I have pix 515R with inside, outside and dmz setup.I get this error: Deny tcp connection spoof from "inside address" to "dmz address"What does this mean?

I've configure a PIX using IPsec (ESP-DES) and ISAKMP with a non CISCOdevice. Between the equipments a router configured with NAT (Cisco 3620) translates only addresses through a static one-to-one nat rule. It works fine, but I need answer to one mai...

When the status of the sa is checked it shows the following staus, could some one tell me the significance of the value shown for the conn-id `1`.Does this value go up as the number of SA`s increase ?eg: If i have 3 SA`s namely A-B,A-C and A-D will ...

I just received the update in regards to 3.1(2)S26 update for the IDS.The update for the IDS sensor was smooth and installed with no problems. I then proceeded to update the CSPM signature file on the NT Server. Everything seemed fine with the inst...

i´ve upgraded from a 5.3 version with comm timeout set to 00:00:00(never expire). In version 6.2 with this command let the PIX have connections(iddle or NOT ) only for 2 minutes. After this time the connection are destroyed.I set the conn timeout to ...