Other Security Subjects

I issue 3 commands write erase, then write mem and reload. The pix restarts I configure the firewall and then write mem, and reload. When I display the running configuration it shows some commands I did not execute such as 11 fixup commands(I only ex...

If a named access list already exists can I add an additional line to it without over writing the entire access list?Paul

Hi,My PIX 515e is showing the following message in the PDM log:Deny icmp src outside: (ip address) dst inside: (ip address) (type 8, code 0) by access-group 101.Is this normal or should I be worried?Thanks for any replies.Robin.

It is understood that Cisco will no longer provide updates for the IDS 3.1 train after 2/28/04.I am currently using the 3.1 train because Cisco has not provided an IDS Event Viewer (IEV) for the 4.1 train compatible with Windows XP Professional. Can ...

Welcome to the Cisco Networking Professionals Ask the Expert conversation. This is an opportunity to discuss Intrusion Detection Systems with Cisco expert Marco Caballero. Marco is a Quality Assurance Technical Lead at Cisco Systems, Inc. He speciali...

We have (2) 3060s running 4.0.3 code and are trying to implement VRRP. Once enabled, customer traffic through the L2L tunnels comes to a creeping crawl. Once we disable, everything works just fine. Any ideas? We have 128MB or RAM with 1 SEP per 30...

Does CSACS for UNIX support an Oracle's RAC(Real Application Cluster)?, because I saw in the CSACS for UNIX documentation that Oracle 9i is supported but I would to know if it most be a basic configuration.Tahnk you!

When I try to configure NTP on my 4215, I get this error (below). I have tried rebooting the sensor but the sensor came back up with no ntpServer configured. There is no connectivity issue between the ntp server and the sensor.sensor(config-Host-tim)...

Am getting a few 'Kazaa GET Request' (11005) alarms, but suspect they may be false positives. Can anything apart from Kazaa trigger this?

Hi folksDoes anybody know some good software tools to test an IOS firewall configuration ?I would like to verify if the rules that I have configured on my router work.I need a tool to simulate various kind of DoS or DDoS, fragmentation attacks and th...

Just getting started on setting up my branch offices with 1711's. Moving 27 branch offices off of Frame Relay onto DSL connections. Goal is to setup vpn tunnel to corporate HQ by putting 1711 at each remote site. Will enable split tunnel, so web b...

I use a pix 506 with pppoe ,then the outside of 506 can get a dynamic ip address from ISP,can I make an inside host (such as 192.168.0.1) act as a server which the internet can access with the dynamic DNS and PAT technology?or is there a command like...

We configured multiple tunnels on c1721, ver 12.2.13T., but ccould not.Is it possible ? or do i need something ?

HI,Failover setup with PIX OS 6.0.1.Observing a lot of CRCs error on a partcular interface of firewall. this is a sec f/w. Due to this the performance of network is very bad. speed settings at firewall end and switch are set to 100MBPS FD and no CRC ...

If a internal user connects to an Internet web page via an proxy, is the user still vulnerable to the attack listed in signature id 5392Current Signature: Engine STRING.TCP SIGID 5392 SigName: Internet Explorer XML Object Overflow Type 1 11 - Service...