Other Security Subjects

Hi all,Csn someone give me some advice please. What I am trying to achieve is:1- a dmz with internet access2- outside access to dmz for www from any3- access from inside host to dmz for smtp and 14334- access for requests from dmz to inside host fro...

Hello, i am just CCNA certified and doing an intership in an ISP. As my first and only job they asked me to create a document wich describes how to create VPNs. I have to write this in "Technical Language": explanation of protocols involved, general ...

I am not a security type person, so if this is a stupid question please forgive me. If a web site uses PHP do I need to add a fixup protocol http:xxxx to get it to work? Every time my customer goes to certain sites, it fails if they reconfigure the...

I have several servers that use Intel Nics that are either dual port cards or use the Intel Advanced Network Services Virtual Adapter, that are two nics teamed using the Intel Proset install, on Win2k servers. I receieve the following syslog message...

I am usin a PIX 6.2(2) creating an IPSEC tunnel. I have several access-list setup to allow subnets on the tunnel however, any traffic destined for the 192.168.10.0/24 network is being decrypted on the way to the PIX but then the PIX is not encryptin...

I was just wondering if anyone could clarify for me, the specific use of ports on Cisco IDS Sensors. I have noticed that the sensors respond to requests on the following Services/Ports: SSH, ICMP, UDP-514, UDP-515.I would like to know specifically wh...

Hello, I'm installing Cisco VMS 2.2 on Solaris in the following setup:HOST 1 : VMS base + IDS-MC 1.2HOST 2 : VMS base + Security MonitorCould anybody on the forum please let me know if there are any ideas for partitioning disk space as I build the sy...

Hello All, Does anyone know of a good white paper for Cisco Firewall Services Module(FWSM)? Thanks,

A PIX will only let a user acces a resource in a DMZ by it's private IP address and not it's public address. I'm sure there is a reason for that that is security-based, but I don't know what it is. Can any one point me to documentation or explain tha...

I have read post where people have been successful slowing down these file share programs with NBAR. I have configured this on our router. It doesn't work for whatever reason. Here is the config I'm using.Cisco 7200 Router IOS version 12.2(11)T2Poli...

Has anyone discovered any benign triggers for this signature yet? It's triggered a few times on my network and the machines are clean.thanks,biz

Hi,I was wondering How I could create a restricted user that would be able only to execute a set of commands like:- show run- show ip route- show intRegards.

Can I configure Sensors (not IDSM) to look after updates on a FTP site frequently and install if it presents?Should I really delete and add the Sensor in IDS MC, when I upgrade the Sensor not with the IDS MC.

I have a 2611 with the FW/IDS feature set. Do I have to enable all IDS signatures individually or are they mass enabled with the 'ip audit' command?Thanks in advance...-->jason

I currently have a PAT on a public ip it is currently translating all internal to external traffic.I have been told that I can use this public ip to translate incoming traffic aswell for example I can make it translate incoming traffic on port 5000 t...