Other Security Subjects

Hi there,Is there any way to decrease the number of logons from MARS to the router running secure http server and ips with SDEE enabled. I see that it happens every 30 seconds (192.168.14.5 is MARS device)================================008489: Feb 1...

Im looking for a solution to deny access to the internet with a 3G ppp modem, when the wired etherned is active. It seems the 3G modem exe-file is using some Microsoft API or DLL's for dialing to the 3G ISP But how do I find out ?

I came to know (v 4.3) that once the events are logged to MARS, we cannot delete or purge them.. i want to know that if i want to delete the redundant events, or sessions or incidents, ones that i don't need anymore, is there a fix for that in >6 or ...

To all MARS Guru,I'm a newby to this MARS, and we have MARS 25.I'm following the initial config guide and I was able to change the default password, interface IP and gateway.But when I found out that my IP and gateway are both wrong, I tried to chan...

Hi, I know that to have selective events from devices, the logging level can be played with ON the reporting devies themselves, however, in case of IPS, i want to send only events for particular signatures matching, can it be done on IPS, or do i nee...

Hi all, Can you tell me what is a good book about ASA to study? What should you recommend? Thanks

I've setup our Windows IIS Server to push web logs, but I'm not surehow much information I'm able to actually see. Can I pull total IPs,URLs, etc?? The only things I see are "user login/out, system, andapplication" events. I see nothing about IIS web...

I have a DMVPN network setup and running almost perfectly except I cannot seem to establish a spoke-to-spoke connection between devices that are behind NAT.Spoke-to-hub is working fine and spoke-to-spoke (when one of the spokes is not behind NAT) is...

Hi, I have a doubt with some access list, I try this command in the interface outside but the interface didn't take the instruction. access-list(access-list-name) extended deny tcp host 192.84.255.51 host(hostname) eq smtp access-list(access-list-nam...

Hello,Previously I defined "user confirmed positive type". Now I need to delete it, but I could not find a way how to do that.Thanks,Aleksey

Hi there,I'm pretty new to Cisco MARS, so please bear with me. I have CS-MARS 4.3 deployed and I'm looking to create a report that we can use to identify users on our network that may be infected with the Conficker virus. I've tried creating a simp...

Hi I have been trying to find out about solutions that will shutdown a switch port if a client does not have antivirus. I have heard mention of these kinds of solutions but I am not really sure were to start looking. I am just wondering if any of you...

HTTP CORE process in IOS router is causing network outage. Its 2821, zone based firewall with IOS content filter. IOS content filter was working fine for last month, all of the sudden today it is working faulty. Network is waving on and off with CPU ...