Other Security Subjects

Is there a way to create a pool or group of non-contiguous "inside" addresses to use in acl's. So you don't have hundreds of acl's to deny outbound traffic? Say you want to deny a third of your network from accessing AOL IM on port 5190 without havin...

2d17h: %CRYPTO-4-RECVD_PKT_INV_SPI: decaps: rec'd IPSEC packet has invalid spi for destaddr=208.158.13.98, prot=50, spi=0xC47DC99B(-998389349)

I have some VPN clients that are having a problem using the VPN client. The message"Duplicate first packet detected!" is being entered in the VPN event log.VPN 3000Concentrator code - 3.0.3.a. Client code - V3.01.Any guesses on the cause and resol...

Hi , I have a quick question ..... Using the PIX I can enable all the computers on the LAN to do a NAT and browse the internet. If I give the command no icmp any any .... all the ping packets from and to the firewall are blocked.Can I see to it that ...

Is it possible to have a static IP address on a 3.x Cisco Secure client terminating on a PIX 6.x.

Due to the 1024 limit of the HP OpenView map, the database seems to have gotten corrupted.It is bringing back old alarms that seem to be "stuck in time" everytime I close OVW and reopen it. I deleted all the alarms and keep having to wait long perio...

Hi. I have a big problem. I have a router 2600 and i need to see the traffic. I use the Traffic Director, but i can't access the router. I need to change the domain, and i don't know how can do that. The program send me a error message: Error ...

I'm having problems connecting to a Ftp Server on the inside network, here is the relevant config,PIX Version 4.4(5)nameif ethernet0 outside security0nameif ethernet1 inside security100fixup protocol ftp 21ip address outside 10.251.8.128 255.255.255....

hi i am new to vpn and have a couple of questions. i have a vpn concentrator 3005 and a user with vpn client 3.1 when they dial up to their isp (aol) and connect with the vpn client, they get all the way through the connection process and everythin...

Sep 28, 2001, 2:19am PacificHi,allmy problem is like this:A router with IOS FW feature set is installed in my office.For internet access use,I implement NAT for LAN users:assigning a public IP correspondind to a scope of private ip for "overload".But...

I am trying to setup shunning from multiple sensors with one shunning device. The user manual does not explain how to do this. Also, I am alittle confused on the definition of a "shunning server". Is it the sensor that is managing the device that shu...

We have not been able to send resets through monitor ports. The monitor ports on set up as such:monitor session 2 source interface Fa9/9monitor session 2 destination interface Fa9/10The version of code is:IOS (tm) c6sup2_rp Software (c6sup2_rp-JK2SV-...

I need to view how much time is left in the ARP timer for a specific entry.I know how to view the arp timeout setting.

I'm having difficulty understanding how the Alias command is different from the static command? Can anyone help please.

We've recently noticed that the Source and Destination addresses in the IDS 3001 alarms have been reversed, that is the source address is reported in the dest adress field, and the dest address is placed in the source address field. This is happening...