Other Security Subjects

Hi I notice that we are receiving the following:ICMP: Type = 3 (Destination unreachable)ICMP: Code = 3 (UDP port 42309 unreachableWhen doing DNS queries through a firewall. it seams to be fairly consistant that when ever the query takes longer than...

I am trying to connect to my server at work through VPN client version 4.0.4 on my XP pro machine(5.1.2600).. I connect just fine but I can't see the remote server in network places and I can't map it as a network drive..I am using group authenticati...

I have a web server in our DMZ. I need to initiate outbound connections from the server to the Internet. The access list bound to the DMZ interface blocks the connection. The access list is necessary for this server to connect to another host across ...

Good morning all,Got a questions about the security.Should my router in my internal network (protected by a Firewall from external networks) deny ICMP packets with ACL?I am asking what is the best practise from the security point of view to manage th...

Hello,Running the latest, greatest image, 6.3.3. When I try and enter a port to be passed through the firewall, I get a message saying in may be a duplicate entry so it was not accepted. However, this entry does not show up the config with a sh run...

ios version = 12.3(6a)ios image = c1700-k9o3sy7-mz.123-6a.binvpn client = 4.0.3(F)I've never seen this one before... Typically when a 4.0.3x vpn client session times out, I see the following two messages in the syslog output:4128: May 12 16:47:46:...

Has any one seen this? Somewhere around the code of 4.1.2 one of my 3002s stopped storing the user name password and it would come up empty after ever reboot. Didn't happen on earlier code. I took it all the way to 4.1.4 with the same results. Ba...

a newbie here, please don't laugh.I need to block a specific port on the PIX firewall (515). (port is 1025). Can anybody tell me what syntax to use? I want to block this port both inbound and outbound. Thanks very much

I am in the research phase of CSA, and see that CSA version 4.5 will work on Windows 2003 Server. What other versions will it now support? (IIS6, Exchange 2003...) Also, will there be any other upgrades, or new features that worth waiting for? Th...

I would ask if anyone can clarify the difference between a "TCP Reset-I" and a "TCP Reset-O" as seen in cisco pix connection teardown logs.Investigation on the cisco site turns up -I is inside,-O is outside.I have conflicting explanations.The first i...

We have installed CW 2000 LMS and VMS( including IDS MC, the router MC and the Pix MC). As part of our increasing our security and moving towards the CISCO Self-defending network model I was going to add the CSAMC to the currently loaded products und...

I have no idea who to email with this, but whoever generated the PDF files needs to do it again!Hopefully someone here knows who publishes the FSM docs?TIASimon

Hi , We have recently purchased a IDS 4235 .Ifpossible does anyone know the best way to span a Gb sniffer ports on a 6509 so that it captures all vlans.At present it is only capturing 1 vlan (our servers) .We have multiple vlans configured and two 65...

I've configured CSA to send SNMP traps out to a management station but just need to know what all the OID variables are that the trap spits out. Is there a published MIB for the CSA product? I couldn't find it on cisco's site (http://www.cisco.com/...