When I look at the Event Viewer in CSPM 2.3.3i, I don't see any events. I know I should see at leat a ICMP request but nothing is registered. I ran nrconns and it shows a good connection and nrstatus shows my daemons are running. Any thoughts?
Feb 22, 2002, 3:44am PacificI have a Cisco 633 for DSL Access. I can open ports and close them. How far can the Cisco 633 be considered as a firewall? Is my network protected when I only open the necessary ports (VPN 1723, PC Anywhere 6531 and 6532 -...
We have two T3 links running at 21 mbps each. I had 1 4230 running on each link but due to some asymetric routing issues the sensors weren't able to see the full duplex flows. We now have a Top Layer IDS Balancer bringing both links into the one de...
We're using two PIX firewalls (506 and 515) between two sites to establish a tunnel. We have no problem getting the initial tunnel working, and traffic routes fine over said tunnel for the entire day. It seems as though the tunnel dies around the s...
Hi AllWe have this Tacas server in at another part of our Group doing absolutely nothing and I need to put some bullet points together so that management can get it transferred to our network team. We have a decent sized network of around 50 routers ...
I have been having problems with updating my sensors with the command ./idsupdate. I have been getting the following output../idsupdate username@x.x.x.x/IDS passwordidsapply results: [Idsapply: executing as euid [100] egid [100]The ftp server that I ...
Are we working on a signature for identifying theSQL 1433 concern?http://www.kb.cert.org/vuls/id/635463If so, when do we expect it to be out?Cheers,Mklotzba@cisco.com
Iplog sizes on several of our sensors have somehow changed from what I thought was the default size of 51200 to just over 1.04MB. I have searched the "conf" files and cannot find where this larger size is being defined. All of these sensors are on ...
----------------------------E0-[IDS Router]-E1--(hostile)--.......|(spwr0).......|...[Sensor]..........[FW].......|(iprb0).......|------------------------------(protected)-----...| [Dir] When I implement Shunning with the E0 interface on my ...
I have VPN module, WIC-INET on my 1720. Remote clients need to access a W2K server in a private network behind a 1720 router. Does anyone have a working configuration how to terminate a pptp connection at 1720? Thanks.JLawan
I am trying to configure the IDS 4210 with CSPM 2.3i. I try to add the sensor using the wizard and choose the "verify IP address". The CSPM says that it is unable to communicate with the sensor. I checked my sysconfig-sensor settings and am able ping...
