Other Security Subjects

Hi,I think I understand how clear xlate works i.e. it clears existing (Translations and the port connections that rely on these translations) So here is the question ?If you clear xlate <all>(existing), surely it clears the Stateful connections out a...

I am running a PIX with inside outside and a DMZ.For a specific application, I need to place a host on the DMZ. The IP address of this host cannot be change and is not from the DMZ global pool.What is the best way to take care of this?. I tried using...

We are looking to set up a VPn between two 3660's. Both have the encryption modules and have been tested using a variety of packet sizes.Now the tests were performed by our network people and they say that the 3660's are struggling to reach 12Mbps u...

One of my sites on a WAN has a partner company that wants to install a Cisco router to give access to their network. It is OK for the partner company to access that site (and the clients must access both systems); however, we cannot allow the partner...

how clear counters which displayed command:router>show tacacs

helooi have intranet with several router based on the company divison, i like to make some rules like this :local-ip dest-1 dest-2 dest-310.32.16.xxx permit permit permit10.32.16.yyy permit deny deny10.32.16.zzz deny permit permitwhat...

Hello Everyone,I'm trying to rebuild my HP Openvies database by following the TAC recommendation by doing the following:su rootcd /opt/OV/bin./ovstoprm nrDeleteOVwDbHowever, this file does not exist. How do I get it back?Thanks for any help.Damien D...

I have come across a new client who is using a pix 515 with ver 4.4. I want to limit outgoing traffic to only 80,443,21 and ideally only a couple of pcs. I assume I should be using the conduit command but I can work out how to apply it.

hi All,I have a very very typical problem with one of the client sites,IM trying to configure a Pix 515 R with exchange on the LAN.The client requirement is to be able to let ony 6 clients browse internet and remaining notto , but mails should work ...

Hi,Is it possible to write custome sigantures to address this new ftp vulnerability as well as badtran worm. regards,Ross

On a 4210 sensor, Does the Duplex and Speed setting of the C&C as well as Monitoring Interface need to be specified for better throughput/performance? I noticed that sometimes the interface links go down and up again for no apparent reason.

Hi all,I have a client who has a request for me to provide security using Tacacs+ or Radius with RSA ACE/Server. Here is a detailed description of what the client wants, any ideas on how to accomplish this.Here it is:The requirement is that prior to ...

I've tried CSPM 2.3.x and 3.0 to define a PIX object with overlapping subnets. Let say the subnet connecting to e0 is 10.5.0.0/16 and the subnet connecting to e1 is 10.5.5.0/24. In this case, the CSPM doesn't accept me. Is there any workaround or I...

I have three tiers architecture (presentation, application and database). Presentation tier is located at DMZ (demilitarized zone). Application and Database tiers are located in secured network (behind firewall). Using Cisco PIX Firewall as DMZ perim...

Hello,We have a VPN-3015, can someone tell me where i can find the description of how the Phase 1 and Phase 2 authentications take place and if the id/pswd encryption are the same for both phases?Thanks in advance.Ronald.