Other Security Subjects

Dear Sirs,I'm interested to get hands-on information about the way Cisco gear can handle the security issues in large real-world enterprise networks. What I mean is that I need to know if and what management tools (CSPM, CW, etc.) can/must be used in...

What is the correct way to halt the 4210 sensor in order to power it off with the power button? If you type init 0 or init 6 as ROOT, it reboots. Please set me straight! Thanks.

We currently have a point to point t1 between two facilities. The circuit is getting overloaded at times and we are adding more sevices so we are installing a 2nd point to point t1. How can I bind the two circuits together in the 3640's I have at e...

We are about to change our NT policy to require user to change passwords. Can that change request flow through an AS5300 access server for remote user?Is there any thing I need to do to the AS5300 config.

I am investigating the possibility to monitor and shunn with multiple screens/usernames/shells on a single director.i.e. a single director monitoring 100 sensors. 10 PC's with screens, each screen with one user and one shell monitoring 10 sensors wit...

I have a 4230. It was working fine but when I issued the shutdown command, sometimes the box wouldnt come up or if it did it had disk corruption and I would have to re-image/recover with the CD. This was due to the following bug: http://www.cisco.com...

Has anyone beta'd this product yet? Any input? Lots better than CSPM 2.3? Has the reporting gotten any better? The documentation states that the IDS and Firewall pieces can be loaded on the same server (unlike the old 2.3), has anyone verified th...

I am installing a Pix Firewall (Model 10000). I am establishing a list of static ip addresses and a pool of ip addresses. The problem is that only some of my list of static ip addresses can view the internet. For example, I have static addresses f...

Is there a way to configure the PIX 506 to use the Domain user rights to allow access through the PIX to the internet? I have ordered a 506, and asked to have it configured to use my domain rights to allow internet access based on a NT domain group,...

Hi All,I have CSPM ver 2.3i (IDS). But How to set up a IDS network. What should I need besides CSPM ??DO I Need a Sensor Server ? Can a server which is installed with CSPM be a Sensor Server ??thanks

OK, time to revisit my shunning project. :-)The last time I tried this, my router was smoked. Now, fortunatly, I have the Director at 2.2.3, and the sensors are at the latest release.To allow the throttling of shun requests to my router, I have set...

My IDS sensor is the 4220-E running 2.5(0)S0. What is the correct packet capture device for this sensor? My documentation gives the correct device for the 4210 and 4230, but not for my model. Thanks.

I'm having trouble getting SMTP AUTH to work on our network, even across network segments that have no specific access-list rules between them. Perhaps there's something in the CBAC setting that prevents AUTH from working properly?Initially...Our ma...

My internet perimeter router has an access list that permits traffic inbound destined for UDP ports greater than 1024. From what I can tell this is needed for web browsing. Does anyone have any knowledge as to why web browsing needs UDP ports greater...

Hello,I'm looking for a performance comparison between reflexive ACLs and CBAC (e.g., which method filters traffic faster and by what factor). A similar type of comparison between CBAC and regular ACLs is presented in "The Performance of the Cisco IO...