Other Security Subjects

I have an ASA5510 (7.2(4)) with outside interface conn to ISP's Cisco 2610 (10M Ethernet - NOT FASTETHERNET).Previously a PIX506E was attached to same router. PIX outside was set 'interface ethernet0 10full' and the router's E0/0 was hard set 'full-...

Hello all,we are incrementally receiving a lot of MARS events that comes from Cisco IDS, all those events are “ NULL TCP PACKET”, and the destination is always the same, a smtp ironport machine trough the 25 port, from diferent public IPs.Does a...

Hi,Using DMVPN phase 3, using one Cisco 3845 as a hub and one Cisco 2851 as Spoke, connected to MPLS cloud CE routers that belong to provider and we have no access to them-For testing the line, we use the ping and works with no problem with no drops ...

Hi, Is there any guide which covers security hardening best practices across most of the Cisco devices such as1. Cat 6500 with FWSM, IDSM, ACE.2. ASA with CSC-SSM and AIP-SSM modules.3. Routers and Switches.Thanks.

MARS release notes indicate that "When upgrading a "restricted" model of MARS appliance (20R, 100e, or GCm) to MARS Software release 6.0.1, all limits enforced by the restricted model will be ignored. The "restricted" models will perform as unrestric...

I have installed and configured a ASA firewall and perimeter router for a business. How can I test to make sure that there are no vulnerabilities? On the ASA, I understand an out going message from inside the firewall leaves a port opened and that p...

Hi, everybody. According to the docs, a session is a collection of events withing a predefined time frame that share a common end-to-end information. Does anybody know this time frame? I didn't find it using google :)Thanks in advance!

Same appliance upgrade path.When I try to import the config from a 4.3.6 export I get this message:pnimp> import config 192.168.0.21:/archive/mars_2008-10-07-10-23-33The most recent configuration archive from 4.3.1 release or later found on the archi...

Hello,running 6.0.1 on a MARS 50. All is good but I ran into an issue where I tried to add a device, after which it never showed up in the list. I did activate after the add. I then attempted to re-add it using the same IP but slightly different name...

I am thinking about upgrading to 6.0.1 from 4.3.6 is there any real advatage? Is the adobe viewer still required to use MARS? Just a couple of thoughts that were rattling around.

Hi guys,I have a client with a data center where they have lots of VLANs running off a 3750 (main switch) and then they have a 3550 and a 2950 running off from this main 3750.They have lots of VLANs configured and I see that Vlan1 is not being used. ...

There is a sequence number with named ACL. I can use the sequence number to add new ACL entry in the current ACL.But I notice it does not allow me to put "remark". We use "remark" in ACL to section the ACl to make it more logically.Ext Access List co...

Hi,Can anyone advice is there anything i need to take note of if i need to change the hostname of the Cisco Security Manager server? A URL to any document would be good.THanksEng Wee

Anybody know how the agents (ver 6) send thier evernts - do they send the events to the MC and then the MC sends on to the SQL database, or does the agent send directly to the SQL database?My server that hosts the MC BSOD'd last Friay after applying ...

Hi,In my network there are 2 tier security level. Let me brief:Internet Link->Router->Internet Firewall->Core Switch-> Server Firm Firewall->Server Firm (SAP Servers).The requirement is: From Internet i want to access SAP Servers which are placed at ...