Other Security Subjects

Hi all,I've been living with MARS for almost a year now and it's still bugging me about the correlation, and I can't seem to get to the bottom of it.My expectation is that a rule should fire whan a security incident occurs.My observation of MARS is o...

Two Data Centers and one office.They are all interconnected with dual links.Plus a single link to the Internet on each site.What is the recommended OSPF design ?Should I have two areas ?Area 0 for the internal networkArea 1 for the Public networkWe ...

Has anyone been able to get https to work with SCEP?Right now I'm just trying to authenticate a trustpoint and it does work if I use http as my enrollment URL but as soon as I change it https I get the following: Unable to locate cert record by issue...

Hi,I'm looking at possibility route a subnet from outside interface to another interface.I have ASA 5510 with Software Version 8.2(1)My scenario like this,I have IP subnet let say 1.1.1.192 Mask 255.255.255.192 and another 1.2.2.32 mask 255.255.255.2...

Can you use active directory for this?

Hi All,I would like to see who was login to router and when.Is there any file I can see in router that log the login event.Thanks for your suggestion.

Hello,We have a customer who have an application on their windows mobile phonesThis application communicate with a server which is inside the company.To have access on this server, this application need reverse proxy. Reverse proxy is used for the ht...

The ASA firewall's syslog messg indicates that the Public IP of the email server xx.xx.xx.ww/443 dropped TCP packets to the ASA public IP xx.xx.xx.yy/34018 due to MSS exceeded. Is there a security or performance issue to allow all packets that excee...

I am receiving the following error when I try to establish an IPSEC tunnel in one of our branch .*Jan 19 14:16:37.059: %CRYPTO-4-RECVD_PKT_MAC_ERR: decrypt: mac verify failed for connection id=2009 local=172.16.16.6 remote=172.16.16.1 spi=4A4D2438 se...

I noticed my MARS box is at signature level 358 released in mid Sept. I am using auto updates. The latest IPS signature release is 361. Any ideas why there is a delay for MARS to support the new signatures?Mars is roughly a month behind. I don't ...

Hello, i am running Mars version 6.02; trying to rename the host and getting following error message:"Program aborted due to ORA - 12541 TNS no listener"Also, trying to change eth0 IP address with following command:ifconfig eth0 1.1.1.1 255.0.0.0 - e...

Hi,anyone know if exists a way of do an upgrade of CS-MARS and don't lose the configuration of the log parsers created manually for non Cisco equipments? During an upgrade we got this data corrupted...Thank you.Best regards,

Hi,I’m going to implement CAS for two central locations and branches connected via WAN. It will be L3 OOB deployment, one redundant CAS pair will be located in first central location and one redundant CAS pair will be located in second central locati...

Hi,I would need to create new TCP ports in CSM to be able to increase the timeout (24 hrs or 86400 sec)Would it work if I create a new inspect? is it the best way of doing this?I know we cannot use the "timeout con" attribute (because it will modify ...