Other Security Subjects

I have the following access applied inbound on our serial port:access-list 170 deny tcp any any eq smtp logaccess-list 170 permit ip any anySome of the log lines that result from the access-list have a period at the front of the line. What does the p...

After installing the S23 update on a 4230 I notice that the SSH version note says "Cisco Intrusion Detection System modifications included". What modifications were actually made to SSH and why were they need to be made? Thanks.

I have a client who wants to allow access to his office network for all the devices on the LAN at his house, which connects to the Internet via DSL. He doesn't want to purchase any new hardware that can create a VPN tunnel to the PIX. Instead he su...

Will ip plus 12.2.8(T) Perform ssh on an 806 router. According to this link it will http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/122relnt/800/rn800xe.htmBut, when I place it on a router, it fails to work. Am I doing something wro...

Inspecting http traffic:!ip inspect name fw ftpip inspect name fw http!!!interface FastEthernet0/0 ip address 10.10.10.1 255.255.255.0 ip access-group interior_in in ip access-group interior_out out ip nat inside duplex auto speed auto!interface Fast...

Hi there,Is it possible to scheadule an HIDS service to work in passive mode for a period and to work in active mode for other period ?!? One costumer of mine asked for this, as they don't have any personnel during the weekend and so...they want to l...

Hello,I Have a NAS from other vendor (not Cisco) and I know that it always sends the NAS-Port attribute with the same value for all requests to the Radius. Besides I need that the RADIUS server provides the ip addresses for the NAS clients from a p...

I have set up the event viewer on a dedicated NT4 machine, but I have noticed problems with the javaw.exe application, that the memory it uses steadily increases on the machine until there is none left. The application doesn't appear to release the m...

I have a customer interested in bringing up approximately 100 sites on IOS-based site to site VPNs (hub and spoke). From the Cisco best practice white papers, it looks like using a CA Authority is the way to scale this solution. I'm interested in k...

I have pix 525 with failover , when i notice that The failover pix become active most of the time especially when there are a high traffic if i switch to primary it work fine for 5 or 6 hours then switch to failover , also i configured a statefull , ...

Dear All;At my radius I have problem with stop record , when I check the debug menu I find that the lns send the username twice which is wrong it must send it once , I don't know where is the problem could it be at aaa configuration the following a...

How does an access list work. Do I need to place an access list to allow the return packets at the ingress interfaces.Local server ------(E0) local router (S0) ---------(S0) local router (E0) ------Remote server ----------HTTP traffic --> <--------...

I'm evaluating Cisco IDS Host Sensor. I was wondering how to update the signatures?

If I was to place a sensor on the DMZ, let's say the 192.168.205.0 segment, do I need to set the command and control interface's IP address to a 192.168.205.x address? What is the best practice in setting this IP address, a DMZ address or internal a...

Can you install and run the CISCO VPN Dialer on a Win2000 terminal server? If I launch the dialer from the console connection it works. If I launch the dialer from a terminal server client, it hangs while trying to authenicated the user. Any info...