Other Security Subjects

I have an issue where I have a dumb layer2 switch (netgear and Linksys) hanging off of a 3550.  Devices on these ports loop during the authentication process, or don't even go through it, the simple get left in the AUTH VLAN.  I do not have any port ...

This has been an on going issue over several versions of NAC (IB).... Currently running 4.7.2Whenever I set up a clieny as an exception (bypass posture assessment) - that client is able to get past the NAC but he/she will always get a popup screen th...

I have 2 user who, when accessing the network using Cisco VPN Clinet 5.0.05.0290 can open word and excel documents from the network shared drives,but can't save them back to the drive.  It simply says files not saved. I thought perhaps the share driv...

How to schedule a backup job for the configuration files of the devices added in the CSM (Cisco Security Manager) Version.3.3.

Can anyone advice how to integrate IronPort into CS-MARS. Thanks.

I would  like to integrate Cisco ASA firewall devices into CS-MARS. As in cisco document recommends to have admin access to ASA firewalls. There are some political issues & problem getting admin access credentitals to ASA firewall devices. I wanted t...

Hi,CS-MARS Version details - 6.0.6 ( 3368 )We have setup ePO4 and CS-MARS correctly as per cisco document but CS-MARS does not see any traps coming from ePo server. SNMPWALK is working fine. I have captured packet from ePO4 using tcpdump but no packe...

Hello.Does anyone know if MARS can filter alerts based on data in the trigger packet of an IPS alert?  We have a customer that is getting between 50 and 150 false positve Union Select SQL Injection alerts each day because they sell Sealy Union Select...

Hi to ALL,I have some problems with correlation Rule: Inactive reporting devices."System Rule: Inactive CS-MARS Reporting DeviceThis rule detects reporting devices that have not reported an event in the last hour. For chatty devices such as firewalls...

Hi,I have currently a CSA v6.0.1.135 MC running with 3 CSA agent testmachines (winxpsp3). On the first day the CSA agent events were registered at the CSA MC. Since the day after the installation, no CSA events are appearing anymore on the MC. I chec...

I think integration between Netflow [collector] and IDS will bring the best tool to detect DoS and DDos. Am I right? Any plans to have such functionality in future versions of IDS?

Hi all, I have confusion with managed subnet, we have 3 untrusted vlans, 9 trusted vlans and 3 separate vlans for vlan mapping. all vlans have different ip subnets, but untrusted vlans don’t have ip subnet, it will another vlan’s ip subnet so which ...

I am trying to setup Websense URL filtering. The configuration is pasted below. IOS version "c1841-advipservicesk9-mz.123-14.T6.bin". However, when I do a "sh ip urlfilter config", I see that the Websense URL Filtering is disabled.-------------------...