Other Security Subjects

Hi,I've create a group to apply some specifics port redirections.It working fine with internal users & nt domain!But when I use a radius server (IAS) for authentification, the portredirection is not apply ?Is somebody have the same problem ??ThanksDa...

Hi When i do VPN to get into my network, i am able to establish a connection but cannot map Network drives.

I'm trying to use this:access-list 112 permit tcp any 172.16.23.0 0.0.0.255 range 46000 46030!on a 7206 router. I know the range command works fine on PIX, however, this is not working on the router, the command takes, but TCP ports within the speci...

Is there a memory shortage on memory upgrades for the IDS4210 and IDS4220. I am having a hard time locating any.Thanx.

Can we change the Nat Traversal Default port from UDP 4500 to any other port. My problem is one of the site has only well known ports opened on the firewall. If I enable IPSEC over TCP (with ports changed) and NAT-T, who gets the priority.

Hi All,A quick question. Can I upgrade IDS from 3.1 to 4.1 directly? Thanks.Banlan

Hello all,I currently have our Windows 2000 development servers located in our DMZ seperate from our internal zone. I create a share on these machines for our development guys to transfer files directly to the environment and lock the shares down to ...

Hey guys I need a help please check out my configuration and help how to permit selected pc to user messenger programs. thanks soldier: Saved:PIX Version 6.3(1)interface ethernet0 autointerface ethernet1 autointerface ethernet2 autonameif ethernet0 o...

I am trying to create a signature using the signature wizard in 4.1I need to see what sources inside my network are trying to open tcp ports 3127-3199.This is the port range asociated with system infected with mydoom A,B, C(doomjuice)...state2 (remot...

I have a static nat statement with an access-list on the outside interface.static (inside,outside) 192.168.0.9 12.12.12.1 netmask 255.255.255.255 0 0access-list 103 permit tcp host 10.10.10.25 host 192.168.0.9 eq wwwaccess-list 103 permit tcp host 17...

Ok here is the scoop. I have a catalyst 6509 and prob about 20 vlans created on my 10.5.x.x network I would like to prevent all the other vlans to access vlan 101 --- however i still need to be able to get out to the internet--- all of my catalyst 2...

The product literature for the PIX525 states that it is capable of supporting up to ten 10/100 Ethernet or three Gigabit Ethernet interfaces. It also says it comes with two integrated 10/100 Autonegotiation ports.I assume the max of ten 10/100 inf's...

Hi , We have a PIX 515 6.3 we have the following problem. We want to publish a server in our DMZ to the internet. The problem is that we should nat the IP of host from internet to a private net . Is that possible ? thanks

Upgraded from 6.3(1) to 6.3(3) and noticed my internal LAN cannot receive DNS replies from my DMZ positioned DNS server anymore.Internal = 192.168.1.0/24DMZ = 192.168.0.0/24DMZ contains DNS server & Email server. Email = 192.168.0.2 inside, a.b.c.1 ...

The new CAT6500 with 720 SUP has a security feature by hard-coding the MAC and the default gateway. What other ways to detect and prevent DSNIFF?Thanks,Audie