Other Security Subjects

I have been receiving quite a few alarm triggers for the signature FTP Improper Address Specified ID: 3153. All of the alarms have triggered when the attackers port is greater that 1024 and less than 65355. The victims port is always port 21. Has any...

Hi, I have A pix 515UR with Version 6.20 and working on a simple setup. Router to Pix to DMZ to Inside Inside Netowrk can Ping the DMZ on ip 192.168.4.2 Inside Network can Browse Internet. DMZ cannot Ping Inside Servers/Network DMZ cannot browse Inte...

I have an interesting observation. The signature Soulseek Client Login has triggered quite often when the victim’s address is a Nachi infected machine. The signature is triggered when the attackers port is 135 and the victim’s port is TCP port 2234 o...

Does anyone have any experience or further explanation of the above/below message other than the system message documentation. I have seen this message being returned with the PIXs inside IP and the MAC address of a server. The server does not have t...

I am starting to use VMS 3 for IDS monitoring. I just realize VMS is using java plug-in 1.3.1, which is older version some of my other programms cannot live with on the same machine. Currently I have to build a seperat machine only for VMS, which is ...

Urgent : Please, does the cisco router 1000 with version IOS 11.1(13a) support IPsec ? When can i find this information in cisco web site?Thanks

Hi,We have CWVMS-2.1-WINR-K9 and 2 Nos IDS-4235-K9 at Customer. We encountered a problem while attempting to deploy configurations from IDS MC to IDS Sensor. The error msg reads "Error deploying configuration files to the sensor'. The IDS-4235-K9 is ...

Can I do this with 2 PIX devices? This is my acutual PIX configuration on the remote Site:crypto map outside_map 20 ipsec-isakmpcrypto map outside_map 20 match address outside_cryptomap_20crypto map outside_map 20 set peer 192.1.1.1crypto map outside...

Hi,Is there a way to do secondary addresses on a Pix like you can on a router? We have a 535 running 6.3(3).Thanks,Brian

Has anyone come up with a way to detect if a sensor is functioning(ie. heartbeat)? In the absence of generating any alarms over some period of time, looking to determine if a sensor is down or just not firing alarms.

Before we enabled this signature, we would catch MSBlaster/Nachi infected machines using the 3327 (RPC DCOM Overflow) and 3328 (SMB/RPC NoOp Sled) signatures.Now that 2156 is enabled, infected machines trigger all three.My question is this however. S...

PIX 515e running 6.3(1)Can FTP be made available over another port in addition to port 21? If so, can someone provide pointers on how to accomplish this?Thanks

I am using PIX 520 and it is working fine but only chat server is not working.Please have a look my configurationPIX Version 6.3(3)interface ethernet0 100fullinterface ethernet1 10basetinterface ethernet2 100fullinterface ethernet3 100fullinterface e...

Does the SSl Module for the CSS11503 Content Switch meet FIPS140 Accredidation (For the government)?Regards,brandon