Other Security Subjects

Welcome to the Cisco Networking Professionals Ask the Expert conversation. This is an opportunity to discuss Intrusion Detection Systems with Cisco expert Marco Caballero. Marco is a Quality Assurance Technical Lead at Cisco Systems, Inc. He speciali...

We have (2) 3060s running 4.0.3 code and are trying to implement VRRP. Once enabled, customer traffic through the L2L tunnels comes to a creeping crawl. Once we disable, everything works just fine. Any ideas? We have 128MB or RAM with 1 SEP per 30...

Does CSACS for UNIX support an Oracle's RAC(Real Application Cluster)?, because I saw in the CSACS for UNIX documentation that Oracle 9i is supported but I would to know if it most be a basic configuration.Tahnk you!

When I try to configure NTP on my 4215, I get this error (below). I have tried rebooting the sensor but the sensor came back up with no ntpServer configured. There is no connectivity issue between the ntp server and the sensor.sensor(config-Host-tim)...

Am getting a few 'Kazaa GET Request' (11005) alarms, but suspect they may be false positives. Can anything apart from Kazaa trigger this?

Hi folksDoes anybody know some good software tools to test an IOS firewall configuration ?I would like to verify if the rules that I have configured on my router work.I need a tool to simulate various kind of DoS or DDoS, fragmentation attacks and th...

Just getting started on setting up my branch offices with 1711's. Moving 27 branch offices off of Frame Relay onto DSL connections. Goal is to setup vpn tunnel to corporate HQ by putting 1711 at each remote site. Will enable split tunnel, so web b...

I use a pix 506 with pppoe ,then the outside of 506 can get a dynamic ip address from ISP,can I make an inside host (such as 192.168.0.1) act as a server which the internet can access with the dynamic DNS and PAT technology?or is there a command like...

We configured multiple tunnels on c1721, ver 12.2.13T., but ccould not.Is it possible ? or do i need something ?

HI,Failover setup with PIX OS 6.0.1.Observing a lot of CRCs error on a partcular interface of firewall. this is a sec f/w. Due to this the performance of network is very bad. speed settings at firewall end and switch are set to 100MBPS FD and no CRC ...

If a internal user connects to an Internet web page via an proxy, is the user still vulnerable to the attack listed in signature id 5392Current Signature: Engine STRING.TCP SIGID 5392 SigName: Internet Explorer XML Object Overflow Type 1 11 - Service...

Using Cisco831 at remotes, Cisco2651XM VPN at core.Land based Internet feed at core Satellite at remotes.Issue with links dropping out.Read some net articles saying IPSEC VPN's not viable over Satellite links?Any insight?Thanks,Bob

What is the command use for Mac address base blocking, in 6500 and 3550?Search in CCO show: >mac address-table static xxx.xxx.xxx Vlan drop. In my 6509 the same cli end at interface but not "drop". What ios version of 6500and 3550 support this "drop"...

I'm trying to figure out which of my devices support QoS and so far it seems like none of them do.I have a Cisco Catalyst 2924XL with this IOS image c2900xl-c3h2s-mz.120-5.WC8.binI have a Cisco 7206 router with this IOS c7200-jk9o3s-mz.122-10.binand ...

I'm trying to figure out which of my devices support QoS and so far it seems like none of them do.I have a Cisco Catalyst 2924XL with this IOS image c2900xl-c3h2s-mz.120-5.WC8.binI have a Cisco 7206 router with this IOS c7200-jk9o3s-mz.122-10.binand ...