Is there a way to export the database logs from the CSPM event viewer database events...or do I need to go directly to the database itself? My ISP is investigating some activity and would rather see the logs in another format.
hello!i am trying to use clear interface command from config mode on pix-525 to clear interface counterspix taking this command and do not return any error message, but when i do ''sh int'' command i still see the same countersplease respondi will ap...
Signatures precedence: assume I want to fire different sigs on CodeRed II (X..X) vs generic .ida overflows. I'd like to do this without having both fire when the more specific one is matched. Any idea?Throttle interval: 1000 seconds maximum seems a b...
Has anyone experimented with the IDS blade for the 6000 series. I am trying to put IDS in a test eniroment using one of out test 6000's. My questions is, what special IOS(router) configurations do I need to look out for to make this work properly? ...
What is the relationship between the SigWizMenu program and the definitions in packetd.conf? As I started SigWizMenu I couldn't see any of my customer signatures from packetd.conf. It looks like that the data is stored in different places. Are the ol...
i updated my 2.2.1 to 2.2.2a for my 3.0 sensors...just to clarify, when i run nrvers off the director, i get 2.2.1 and 2.2.1.1 [<--only for postofficed and sapd]results...if i rerun the 2.2.2 install, then i am told 2.2.2 is already installed...<2.2....
I have enabled the SPAM signature 3106 on my sensors. I have used the Epologue command to change the NumberOfRcptTo 10. I set the action to IPLog, TCP Reset, and Block. It shows NumberOfRcptTo 10 at the bottum of the packetd.conf file and I see the a...
I have PIX 515 ver 5.1 with six interfaces. I have to allow a network on one of the interfaces to inside of my network. Do i use NAT or should I use static/conduit. Please advice also appr. if u could provide with sample config.
We are using Pix together with Websense.Only problem is that we cant tell any more if the site is down, or if Web-sense is blocking the site.Does anyone know how to configure a default "The page you requestet is blocked due to policy reasons"-Page, w...
My CSPM 2.3.1i has gone awry.Whenever I modify a sensor configuration and update the policy the changes are not saved to the database and they are not sent to the sensor.Looking at the Application Log in the (Window's) Event Viewer, every Update acti...
I have a full C address pool. I cannot use .1 as the ISP has assigned it to the 2610 LAN interface. I have two different physical networks that need to share this gateway address. I believe I should buy a Catalyst 2912. I plan to use the remainin...
Hi All,I have a problem with cisco 7200 and MRTG. The MRTG doesn't grap the User information from the router correctly. Actually I have used the Correct MIB ( I think). Does any one know why... or perhaps there is trial version from cisco to monitor ...
