My question is on filtering signature #3030 (TCP SYN HOST Sweep). I am seeing alot of events from this signature. When I looked at the NSDB it recommended filtering it out for internal hosts. I feel a little reserved in doing this. I am just curi...
Hi All,Recently, I upgraded both the memory and software image to 512 Mb and 4.1 S76 on the IDS 4210. Now, the memory utilization is going through the roof at over 90% after installing 4.1. I can't seem to be able to log on to IDS browser admininst...
Hi,I have a Cisco IDS-4235 box in the lab. It's ruuning SW version 4.1(1). I would like to know if IDS dose support SNMP? Basically we are trying to monitor the status of IDS through SNMP interface. The things need to be monitored like System UpTime,...
PIX newbie here,I cannot get access to internet through my PIX-503 version 6.3(3)I can ping from pc, and dhcp assign IP from firewall too, but cannot get out!I have ISP router cable in port 0 and cable to LAN hub is in port 1.my router IP (example) 1...
I have a NIDS which is alarming (Sig 4508) on dest port 8000. The NSDB states that this signature is designed to alert on UDP traffic destined to port 161. So why is this signature firing?Bob
Can someone explain what the usefulness of the "pdm enable history" command is? I have read the explanation in the Command Reference, but it doesn't give much detail on how/why the command should be used. Thanks.
I would to access a web page that contains a Control panel for administrering an external website.The Hosting company tell me that I need to enable ports 8080 and 8087. Can anyone tell me how to do this? I am a complete novice at PIX config.I assume ...
hello, i have a problem with a mailserver. here is my configuration. global (outside) 1 x.x.102.227nat (inside) 0 access-list noNATnat (inside) 1 192.168.100.0 255.255.252.0 0 0nat (inside) 1 192.168.112.0 255.255.252.0 0 0nat (inside) 1 192.168.120....
Hi together,my problem is, that I can never find how to configure a firewall services module on a catos switch in combination with the msfc. For native IOS there are several examples but for CATOS there is only the Layer 2 part mentioned and also tha...
I want to configure a 1721 Router with a 4-Port Fast Ethernet Switch WAN Interface Card to create a DMZ with a WEB server connected to one of the 4 ports. The router has another serial interface card which connects to the internet. Since I have never...
During the setup of the NIDS version 4 sensors, the following questions are asked. Could you help by giving the correct answers for each of these questions if the sensor is located in Brussels, Belgium?Modify system clock settings?[no]: yes Use NTP?...
Hello,we use filters per IDS to filter known traffic out of the CSPM 2.3.3i logging. Some filters don't seem to work (simple and advanced filters). In these cases I noticed that when creating the filter, the signature doesn't show any subsignatures, ...
Hi every body,Is there any way to limit a user to an specific IP?so that if he changes his ip address then the switch 2950 does not allow him to connect to local network?
