Other Security Subjects

I have a webserver (DMZ) that needs to send smtp traffic to a mail hub residing on my trusted net (10.1.50.x). I've been able to get traffic to the DMZ (172.16.1.x) from the Trusted Net, but not able to initiate traffic from the DMZ and routed over ...

How can I confirm weather or not users are active on the VPN tunnel in the PIX520 box.

what's the difference between ACL and conduit command?thanks

Hi,After upgrading my pix from 5.2(1), to 6.1(1), I get the following warning on my crypto map. Can anyone comment on the significance of it? Thanksnetsafe1(config)# crypto map texas 22 match address 103WARNING: access-list has port selectors may h...

I have a CSPM 2.3f installed on a DMZ and I can't log in from a client located outside.The firewall right now simply translate IP addresses from private to public and let pass every packet (counduit permit icmp any any + conduit permit ip any any).I ...

We've been looking into purchasing an IDS box for our network. Currently we have a Norton Antivirus server running on a network that pushes updates and scans our e-mail servers and filers. What would be an adventage of purchasing an IDS? I would li...

We've set up several (ok, more than 1, less than 10) Pix tunnels V5x to V5x. Now the new PIXs have V6x on them. When we config the V6x PIX the same as we have in the past with V5x, the tunnel establishes, but no traffic goes through -- tested most ...

I have pix 515r.In my Inside is conected my PDC (Domain Controller) Windows Server NT 4.0, and I´ve problems with my Pc´s and servers conected in DMZ, they can´t logon in my Domain.I supposed I need open more ports between dmz and Inside, can you he...

I received this message when creating a new ipsec tunnel. Anyone know what it means?5d10h: ISAKMP (0:82): deleting SA reason "gen_ipsec_isakmp_delete but doi isakmp" state (I) MM_NO_STATE (peer xx.xxx.xxx.5) input queue 05d10h: ISAKMP (0:82): deletin...

I am implementing an MPLS VPN connection over a satellite full-duplex link. (round trip delay= 600msec). I need to know if their are any issues with estabilishing and MPLS LSP using Cisco 12000/7606/3660 series routers over this high delay network.Wh...

Hi,I am working for a medium size company. We got a central router (3640) and different remote sites (1603 Router). These remote sites dialin to 3640. We have configured ppp encapsulation and chap authentication. We do not want to invest in TACACS an...

can I filter ICQ traffic pass through the PIX?

Could I use ACL down to port lever on the vpngroup split-tunnel? likeAccess list 100 permit tcp host 10.20.0.4 172.17.1.0 255.255.255.0 eq smtp........vpngroup mygroup split-tunnel 100I try it, but not work.Thanksben

Hi allI hv good handson in IDS Sensors.but i have some elementry doubts.I would appreciate if anyone could give me a detailed explanation or any links on the following -:))1) Whatz the traffic monitoring capacity (25MBps / 100MBps) in Sensor ?? How d...

Do the sensors /unix director need to have the latest Sun patches for the ssh or login vulnerabilities....or will these get patched with the 3.0(3) release??