I know I've seen in the documentation how to change an existing sensors ip address, but I can't find it now. V 3.1.5, Unix director. Can someone provide a pointer?thanks
Is it possible that a shunning router will leak normally blocked inbound packets? Possibly when the acl numbers are changed on the inbound shunning interface? We're seeing a few packets get through that should be blocked by the pre-shun acl, and we...
I am applying filters directly to my 4210's to limit what I see in Cisco Works MC. After applying the filters I am still receiving the events. Any ideas on what to try? I am entering the filters at IDS Device Manager-> Configuration-> Sensing Engine-...
I have two websites hosting on one server inside. Currently I have a static NAT from a public address to an internal address for one of the websites, but, if I want to statically nat the ip address for a second website, it says that there is an over...
When I fire my IDS, I can see many false positives from VMS, such as IDS Evasiive Encoding and Long WebDAV Request from my cisco cashe engines, Namp UDP Port Sweep from my DNS servers, and Sendmail Data Header Overflow from my exchange servers. How c...
Ive been getting alot of False positives 3325 (Samba Call_trans2open)..errors on my IDS 4235 ver: 4.1. They are all occuring from workstation or member servers that are trying to connect to my W2k server. We are not running Samba on Lan..Any advice w...
Hi,We just purchase a Cisco IDS 4215 and I want to backup the image which is locating on recovery partition on the HD to CD. How can I do that? Thanks in advance.Banlan
Using 2.2.1.8 netranger director:Netranger automatically forwards level 4 and 5 alarms from the sensor to director into the /usr/nr/var/(log) file. Other than setting the minimum level of alarms to display to 1, is there a way to send level 1-5 alar...
The PIX 515 appears to be working, access is allowed where required, and blocked where not, but following a change to allow our internal lan to access the machines on the dmz, I'm getting pummeled with deny udp messages. Items with an asterisk were ...
We have an internet connection from a pix 515e via a leased line router.the users can access the internet no problem and also we can get people accessing our web server but we have no outbound or inbound email.we have our own internal email server.ou...
Greetings:Where can I find information to translate the meanings of entries in the IDS MC audit log? I am unsure if they are business as usual or indicate a problem with the applications or communications that need to be tracked down.*such as:Monito...
The firewall is having some problems..1) Hard disk shows 0 mb free.Here below specified are the configurations:Login: adminPassword:CES>enPassword:CES#sh veCES#sh versionContivity Extranet Access Switch SoftwareSoftware Version: V04_06.120Soft...
