I have a IPX network to be protected,my internet connection is T1 line and PIX506e is sitting behind the Cisco IPX router.I know PIX can protect by IP and I wonder can cisco PIX protect my IPX network.
how to write an ACL like this?if I want to deny all the traffic of 10.0.0.1 to 10.0.0.104,is there a way that I just write one phrase like"access-list 101 deny ip 10.0.0.1-10.0.0.104 any" in router or pix?thanks!
Hi All,Would you please help me on these messages? Cause I keep getting those every day, I am wondering there is something happen, but I am not sure how. The source ip is our DNS server and destination ip from outside.IN,OUT,3,4613,0,TCP/IP,source ip...
When we deploy new IDSM2 blades in various locations, we need to verify that the sensing interface(s) have sufficient visibility into the protected nets. In order to do this, we (security group) rely on network admins to setup SPAN, RSPAN, VACLs, etc...
I've loaded this update via IDS-MC to two separate version 4 sensor appliances, and both of them now report their current version as 4.1(1)S47. I've also attempted to downgrade the sensor by issuing the dowgrade command via the cli in config t mode ...
I have a 3005 in parallel with pix 515. Both inside interfaces connect to internal switch. From remote, attempt to establish vpn client connection to 3005. The attempt times out, event log sometimes shows that unencrypted packets were received. I not...
I have an IDS 4235(V 4.1), only i have The Threat Response Soft to do the monotoring dos it have the same purposes and fonctionalities as an events viewer, in other way can use This soft in staed of IEV,thinks
Hi all,Anyone have any experiences deploying IDS 42xx appliances (e.g. 4235 and 4215) with network taps (e.g. Finisar UTP Tap IL/1)? I deployed several of the IDS appliance some months back using the Finisar taps, and thought everything was working w...
I am busy analyzing the alarm “Windows Locator Service Overflow” with in our network. The signature says that it will trigger when with the following parameters8 - MinMatchLength = 2000 11 - ServicePorts = 139,445I would like to see an ...
I am trying to draw a Cisco SAFE solutions for a customer. However, my visio dosen't have those new colorful icons for IDS & Firewll. Can any one tell me where can I find or download those icons??Thanks in advance
Hi,SSHD was not working on our sensor today. I logged on through an alternate method and found that SSHD wasn't running. After investigation it was refusing to start because /var/empty had rwx permissions for group and other. However, we had not chan...
In reading the Documentation, I understand that when smtp packets are inbound to the PIX, and fixup smtp is enabled, the non 7 commands are translated into XXX's. And it looks like the mailserver then recieved the XXX commands and replies with a 500...
I have a question about the basic functioning of the ipsec tunnel in a site-to-site ipsec vpn connection. I need to be able to ping the external/outside interface of a Cisco 1711 router at a branch office. When I set up the 1711 just as a wide-open...
We've got a lan to lan tunnel up and running. We have IP connectivity, remote control software runs between sites, NSLookups, and NBstat are fine. When we try to add a local PC to a remote NT (2000) domain, we time out. Is there a tech doc out the...
