I have an sensor that is firing alarm 8000 with a subsig id of 51314. I amunable to locate this subsig in the CSIDS Signature Encyclopedia. Can anyone tell me what this subsig is???
Hi,We have a third-party RADIUS-Server that is used for the AAA with an Access Server (Cisco 3600). The Authentication and Authorization is working OK...but I've problem with the "famous" Attribute VSA (26)...I would like to set this attribute as cal...
Hi,I need to reference a fully qualified domain name for a host(whose IP address changes frequently) in an ACL. When I do this the ACL resolves the IP address immediately and never uses the internet name, but rather uses the IP address it first reso...
When I execute per the instruction IDSk9-sp-3.1-1-S22.bin I get the following error messages.Invalid character (0x0) on line 911244No end of linetar: read error: unexpected EOFchmod: warning: can't access ./sen31sp/install/ids-patchinstall./IDSk9-sp...
Hi. When we point a browser to a PIX do make administration through PDM, an Java applet is initially downloaded. Does somebody know how big is this applet?Being more practical, does somebody know how long it takes to dowload this applet over a 64Kbps...
Hi,Have a PIX 515, that after upgrading the software and installing PDM, startup messages report floppy, keyboard and monitor errors. PIX completes boot process and starts operating OK.Just wondering if anyone else has seen this.ThanksMark
I have a customer who wants me to set up LAN to Lan router to their internet routers at two locations. The new router must be able to make a VPN connection to each other and act as a firewall. I am thinking of using the 2611 with an aim/vpn-bp modu...
can anyone offer a doc-link or an brief explanation of the difference between conduits and access lists. Im quite familar with router access lists, this conduit thing is a bit new. Are conduits applied to all interfaces withn a pix and does it then...
Dear All,New to the world of IDS I am seeking assistance in the interpretation of a swarm of alarms noted in the logs last week.I have a bank of 8 IIS servers and a 4230 sensor sitting behind a PIX firewall. On any given day I will see a few hundred ...
What are the typical features of a good firewall configuration for a Cisco router? I'm having a hard to time determining just exactly what is a good way to secure a network? Are access lists good enough? How about the firewall feature set of IOS and ...
I'd like to have the alarm logs moved when they serialize. Before I write a script to do this -- can I do that with sapd? Specifically -- I am doing this with ftp within sapd right now -- I want to use ssh or sftp.Thanks,brkn!
I updated IDS via CSPM, ran update, I get the following message"Specified IDS Sensor Version 3.0(4)S21 IDSM is not an exact match to a supported version. All features may not be supported."Is this something I should be concerned with?
Configuration:PIX 515E w/6.2.1Inside: 1.2.3.224/28 (e1 IF = 1.2.3.225)DMZ: 1.2.3.240/28 (e2 IF = 1.2.3.241)No translation – all static.I >accidentally< had a >Windows ME< computer on the Inside IF with the following config:IP: 1.2.3.250 <<<<< out of...
