Other Security Subjects

I have a customer that has a peculiar situation that requires a static NAT to a host on a subnet remote to the inside of the PIX. This remote host has a static route back to the PIX but it uses a DIFFERENT default route. This creates the problem: t...

I am getting ready to launch 12 IDSM-2 modules in our state agencies. We have 20+ DNS and ADS servers, 35 - 40 web servers. Each agency has a monitoring group that use programs such as; pinger, nexxus, netview, etc.... I know these machine are going...

I'm looking for some guidelines for the flood signaturesICMP FloodUDP FloodNet Flood ICMP RequestNet Flood ICMP ReplyNet Flood ICMP AnyNet Flood UDPI have used the "diagnostic" mode to determine values for these signatures but I am really not sure if...

Signature update S67 is available on CCO. S67 provides coverage for the Novarg / Mydoom virus.

HiRegarding LAN-based failover in PIX'es - is it possible and supported, having multiple failover installation in same subnet/vlan or should each set of PIX'es have their own subnet/VLAN ?Thanks in advance.-Christian

I need to write a signature that will allow me to detect a specific modification to DNS servers. Specifically, I have a manually entered MX record that keeps 'mysteriously' disappearing. Let's suppose the the MX record is for mx.mymail.com.... How ...

We have ids netranger(old one) with 512Mb RAM and 512K cache. The version information that i found on the CSPM is 3.0(1)S4. We are using CSPM ver 2.3.3 . Which IDS version can i install on this please let me know the exact version number and methods...

Hi ThereI have some doubts regarding access. I have tried to explain it clearly.These statements are from cisco documentation(Using nat,global,conduit and .....). "..By default, there are no access restrictions on outbound connections through the PIX...

Ok,So I have my lab network set up with my shiny new PIX 515e, and I am learning my heart out but I am having a problem with a static command.I have a vendor who at this pooint isnt set up for a VPN so they use PCanywhere and I need to open a hole in...

Hi All,I'm using NBAR to stop p2p traffic which includes Napster but it is also stopping egress Oracle 9i portal which uses TCP 7777. Is there a way for me to allow Oracle portal traffic to connect (without changing the Oracle port) but still restri...

After applying the signature update S67, The sensors are being reported as Indeterminate on the Security Monitor for RDEP IDS. I have deleted all the sensors from the monitor and manager and re-added them. Logging into the sensors via ssh, i can do...

Hello,I have a IDS4215 (IOS4.1).When I start a signature update for the sensorfrom CLI or WebGui and the update fails becauseof network or ftp-server problems, then I haveto wait nearly half an hour before the sensor isready again for a retry or for ...

Is the VMS2.2 alarm database remotely queryable using ODBC and/or JDBC? If so, how?Using IDSMC 1.2Solaris 8

I cannot get the IDSMC to update the management stationI am using VMS 2.2 and SecMon 1.2.3I select Configuration >Updates >Update Network IDS SignaturesEach time I receive the message“Apply the IDS-sig-3.1-5-S66.zip update to the Management Centre.”I...