Other Security Subjects

I like to launch the following case:We have a PIX525.Internal IP addresses: Webserver 172.31.253.1 and Citrix Metaframe 172.31.253.2PIX Outside interface: 80.79.23.111I want remote users to be able to connect to as well as to the webserver as to the ...

Hello AllI have a FWSM in a 6509 that will be protecting internet server. (web,mail,dns, and various other) The 6509 has multiple vlans associated with it. Does the firewall need to know about all these vlans? Thanks

I have a very basic question. We have a 4250 IDS running version 4.1. I use IDS Device Manager to configure the IDS. My question is: What is an Event Filter? Once you create an Event Filter, what happens to the traffic that matches the filter? I...

Hi,Had a synflood attack and it cause my router to high high CPU utilization... However if i remove the ip tcp intercept, then the CPU utilization is fine... Any solutions for this?Thanks,Steven

I am testing with a few 1700 Cisco routers in the field running CBAC and I would also like to apply ingress and egress ACL. The routers are dual Ethernet routers and are connected to the Internet. One Ethernet connection to the outside, one Ethern...

On Snort we could specify inbound and outbound traffic. Can we do the same on Cisco sensor? Is there a way to tell it to watch certain traffic only.Thanks,Simone.

I get the log 305005 ("Translation group found for ....")only for two specific machines in my DMZ1 trying to connect to one specific machine (172.16.Z.Z (mapped)) that is in the inside interface.My config is like this:nat (inside) 1 0.0.0.0 0.0.0.0na...

We have 3 remote sites connected to the main site via a tunnel from a 2621 router at main site to 1721 routers at each remote site via an ISP.I have been seeing entries in the firewall (PIX) log with the 2621's wan address as the source address. The ...

This trojan / worm was discovered on the 15th and has a high exploitation potential. Its details are summarized and our coverage is outlined here:http://www.cisco.com/cgi-bin/front.x/csec/view.pl?VID=3913Derek

I was given an ISDM-2 to test on a 6513 and have configured it with my co-worker. We have put all the basic command and we are unable to ping from the IDSM-2 to the rest of the network. Here is the config that we used.DSM-2UiTM# more current-config!...

I am using pre-shared key with Xauth.ISAKMP neg fails with Hash payload is incorrect

When setting up the IDS it asks for a pre-block and a post-block ACL. I currently have an ACL on my interface; this will be my post-block ACL (correct?). I also have two interfaces in my router; I assume I will add two interface to the IDS? Thanks, H...

Greetings,There's an ongoing thread on the pen-test mailing list over at securityfocus.com involving what the original author suspects is shunning. (Thread index: http://www.securityfocus.com/archive/101/357990/2004-03-16/2004-03-22/1)In a nutshell, ...

Hi,In PIX access list, what is the difference between the two? If I what to permit normal ftp access to my internal server, do I need to open both? or just ftp? What is ftp-data for then?Thanks.

all the ports are open on one of my internet gateway router. this is a big security vulnerability. y all these ports r open? may be DDOS attack or...plz help me.