Other Security Subjects

Dear Friends,i have installed IDSM2 in cisco 6509 switch. I am havin 8-10 VLANs configured in it,I want to make the configuration of IDSM-2 in such a way that the traffic (rx/tx both) some servers are placed in some vlans (say 3-4 Vlans) to be captur...

This signature is trigger when the NIDS captures x400 protocol between a Microsoft MBX and IMS. Has any else one on the list see this. Is this a false positive?. Is my statement true or not?

I get these 402101 errors every few days. The duration of the messages getting logged is about 10 minutes. When this occurs, one of my remote sites that is connected to this firewall via the VPN (Another PIX) "loses" connectivity to this site where...

I know I've seen in the documentation how to change an existing sensors ip address, but I can't find it now. V 3.1.5, Unix director. Can someone provide a pointer?thanks

Is it possible that a shunning router will leak normally blocked inbound packets? Possibly when the acl numbers are changed on the inbound shunning interface? We're seeing a few packets get through that should be blocked by the pre-shun acl, and we...

I am applying filters directly to my 4210's to limit what I see in Cisco Works MC. After applying the filters I am still receiving the events. Any ideas on what to try? I am entering the filters at IDS Device Manager-> Configuration-> Sensing Engine-...

I have two websites hosting on one server inside. Currently I have a static NAT from a public address to an internal address for one of the websites, but, if I want to statically nat the ip address for a second website, it says that there is an over...

When I fire my IDS, I can see many false positives from VMS, such as IDS Evasiive Encoding and Long WebDAV Request from my cisco cashe engines, Namp UDP Port Sweep from my DNS servers, and Sendmail Data Header Overflow from my exchange servers. How c...

I cannot bring up the Nework Security Database windows from VMS when I highlight one alarm then click the icon above, does anyone know what's wrong?

Ive been getting alot of False positives 3325 (Samba Call_trans2open)..errors on my IDS 4235 ver: 4.1. They are all occuring from workstation or member servers that are trying to connect to my W2k server. We are not running Samba on Lan..Any advice w...

Has anyone successfully used and IDSM (ver1) to block using VACLS on a 6k switch? If so, how?Thanks in advance,Chris

Good Day,Is it possible to set a console password for getting into the non privileged mode for a PIX525 running v6.2(2)? Thanks.

Hi,We just purchase a Cisco IDS 4215 and I want to backup the image which is locating on recovery partition on the HD to CD. How can I do that? Thanks in advance.Banlan

Using 2.2.1.8 netranger director:Netranger automatically forwards level 4 and 5 alarms from the sensor to director into the /usr/nr/var/(log) file. Other than setting the minimum level of alarms to display to 1, is there a way to send level 1-5 alar...

The PIX 515 appears to be working, access is allowed where required, and blocked where not, but following a change to allow our internal lan to access the machines on the dmz, I'm getting pummeled with deny udp messages. Items with an asterisk were ...