Other Security Subjects

Is it just me or did the port #’s disappear from the syslog when converting from conduits to access-lists? Those port #’s were invaluable information. I’m currently at version 5.1.2. Can anyone tell me if you get the port #’s back in a higher revi...

At us is a little Cisco SOHO 77. I dynamically far off can operate a packet filtration (to change filters) with Unix, say, on RSH? If it is possible how to make this procedure most safely?

Sorry if this is somewhere in the documentation but we can't find anything helpful.We have put out Netranger sensors behind a firewall doing NAT and have set the default gateway on the sensors to be the Firewall. The sensors can ping out and telnet o...

Hello,Im still learning about ACL's and how they work, but I have one question. I have taken the static IP from a clients @home system and placed it inside my ACL's list on the 2 2600's we are running at work. On the server side I have PPTP running b...

What is the maximium amount of logical connections that can be made through the VPN tunnel at one time?

I have a PIX 515 running 5.3(1) with 4 DMZ ports. I have a machine off of one of the DMZ's that I want to allow only specific addresses to FTP to that machine from the Internet. Is that possible? How would I do that?Thank you!Susana Wraight

I understand that FTP leaves a Security hole because of its nature of starting two coneections, control and data.What would be the best method of doing FTP to a server on the internet from the inside network behind the firewall.Is proxy the best solu...

Hey We are designing a solution based on Internet VPN, but are worried about security issues on connecting thru the internet. We have looked at things like tunnelling, having a hardware based security solutions or may be software based like checkpoi...

I have a access list set up: access-list 11 permitx.x.1.0 0.0.0.255. Would I like to know is if Ineed to apply the Access list to the interface as inbound or outbound.I want to prevent anyone coming in from the Internetto my Lan. I only have one netw...

Who can tell me what is the best way to physically connect a Proxy server into my LAN. I have two LANS connected with a WAN link. I have internet traffic as well as Inter-LAN Traffic passing the WAN link. How do I do the physical connection of the Pr...

Is it possible for a NAT implementation to convert simultaneously ANY possible inside local address (multiple IP ranges, VLSM etc) to a single inside global address? Inside local can be routed or non routed ranges.Thanks - Chris

I experienced that the signature 3050 is firing if SYN requests followed by SYN/ACK packets are logged (traditional Half Open SYN attack), or if only SYN packets are received (service down). There is no subsignature to distinguish between both proble...

What is Cisco's position on using SSH on the IDS Sensor Appliances (supported, no support)? I would rather have SSH running to allow the use of sftp rather than ftp to copy logs. I'm sure if it's not a part of the sensor software, it is probably un...

The Cisco Routers I have scanned have some MStream ports opened. How do I close this ports or prevent a attack?

I have 2 515's setup in a stateful failover config. I have dedicated interfaces connected with a crossover cable used for the stateful interface. However my outside interfaces keep trying to exchange ?hello? packets and it is triggering the PIX-IDS...