Other Security Subjects

Hello allDuring a MARS demo a client requested that we set up a rule that would fire when some Windows Server event happened. He picked clearing the Security Event Log as an example (event # 517 in the Windows Event Viewer). So using 517 as a keyword...

I have the following command issue in Pix506e. static (inside,outside) udp interface domain 192.168.18.114 domain netmask 255.255.255.255 0 0However, we found that it is not able to resolve an external request even though the log file indicate that ...

I have VRRP configured between 2 CVPN 3030 Concentrators. The failover works fine.I have RIPv2 enabled on my LAN's internal router. The Concentrators have RIP enabled on the Private interfaces too.The concentrators have been configured with manually ...

Welcome to the Cisco Networking Professionals Ask the Expert conversation. This is an opportunity to learn with Cisco expert Nadeem Khawaja about troubleshooting Cisco Intrusion Detection Systems and Intrusion Prevention Systems. Nadeem supports secu...

Hi;I have the following config on my 3 interface PIX but I cannot access DMZ address 65.213.200.17 from Internet. 172.30.14.11 is my DMZ web server and I allow only https.access-list OUTSIDE_IN permit any host 65.213.200.17 eq 443static (DMZ, outside...

Trying to configure a FWSM for the first time. I would like to have my DMZ accessible by both a static NAT and its local IP. Can't seem to figure it out.I know I will need to disable icmp before I go into production but here is my context configura...

Please help me out on this,i have to disable the icmp on both interfaces on a concetrator so that people can't ping them.what should i don?many thanks in advance John

What permissions need to be given to users placed into the CCAA Temp role to allow the Symantec Anti-virus to update? Does the Clean Access Server get the updates and give them to the client or does the agent fire-off the live-update of the anti-viru...

Morning, I've been working with a Cisco firewall on a new job. I'm not as familiar with its IOS as I am with other Cisco products. What is the command string to add an outside IP access through?Thanks

I'm authenticating against RADIUS and placing all uses in one role. But, I want to require the CSA Agent. However, users will have Windows, MACs, PDAs and Linux. If I require the agent for the role, what happens to non-Windows users who don't have...

All of our Pix's are setup with a PAT address for outbound web surfing. By default, we allow destination ports TCP 80 and 443 outbound (DNS is handled by an internal server). There are no related ports allowed inbound as the return traffic should b...

Dear all, I'm using a cisco VPN concentrator 3020. Currently, i've some FTP throughput problems. Indeed, my FTP data rate, through a VPN connexion, is about 30KB/s. Without the VPN connexion, i have a data rate of 400KB/s. The TCP MMS size is set to ...

We have a project to implement Cisco CSA within the organization.Another group within the organization is pushing installing Symantec SCS (Symantec Client Security) which is touted to provide IDS, AV, FW, and Ad-Aware protection.I understand that CSA...

Dear allDoes anone know a link to or how i can get my hands on the PIX upgrade to version 7.0??I can't seem to find it on the CISCO website or i don't have access to it.ThanksJames

I am currently run a PIX 515e 6.3(1) PDM version 3.0(1). I plan to upgrade to PIX version 7 in 3-4 weeks time but in th interim I want to upgrade the PDM to version 3.0.3. The version that I am running is very unstable.The installation documentation ...