Other Security Subjects

Hello,We are deploying a 3005 with both interfaces in the same DMZ. I notice that the private interface can be changed to public. Does this mean that we can configure the 3005 to use only one interface and route the traffic in and out of this one i...

Does anybody have a list of all the IDS signatures in an exportable format? I'm looking for a table that has the Signature/SubID, Alarm Level, Signature Type, Signature Structure, Implementation, and description.With that it would be easy to create t...

My Threat Response software just quit working, when I went to download the install software (updates) they all say "DO NOT DOWNLOAD". What's up with that? By the way, I get the page below when I try to launch TR: Application Error We're ...

Can the IDS cpu be upgraded from the current 550 Celeron Processor to something higher?

When I try to add a second VPN tunnel to a different location it "breaks" the first one. This is only after I add my Crypto Map commands for the second one. After the first tunnel stops working I start to do a series of no crypto commands to cancel...

Im having trouble upgrading a signature version on my 2635 sensor using scp. Does anyone know the exact command I need to use? Ive done a bit of hunting, but none of the things Ive tried works. Im trying to upgrade using scp with the file being on...

Hi,Are there any workarounds if two PIX firewalls have different isakmp identities and they need the keep their current isakmp identity?One is using "isakmp identity address", the other is using "isakmp identity hostname".Is there any solution to mak...

I have form a dmz in pix, for example, assigning 157.1.1.0/24 for outside, assigning 157.128.1.0/24 for dmz, and assign 10.10.10.0/24 for inside.An inside node act as mail server for internet.The command is:(conf)#static (inside,outside) 157.1.1.9 1...

My pix have 3 interfaces:inside,outside and dmz.I have configured multi-PAT between inside and outside via saming NAT ID.But now I want translate all my internal network addresses to dmz with ONE PAT address with following command:(conf)#nat (inside...

We have then IDSM2 with version 4.1 and CiscoWorks with VMS 1.2.When I add this host in CiscoWorks Security Monitor, the connection status is "indeterminant".I see the events on the blade but the connection with ciscoworks doesn't work. All services ...

I have been receiving the PIX syslog 106016 messages over the past week. I have recieved over 50 so far today. Like others, the source address is 127.0.0.1 and destination is one of our public IP address (at random). When sniffing the traffic, the...

Hello, I looked though the ACS docs and didn't see anything specific to my question. I was looking for a white paper or similar info on how to restrict our wireless users to a specific subnet on the network - not allow them access to the subnet where...

I'm struggling here, i'm not a firewall expert but need to roll out a PIX 501 firewall very quickly.I've always used Watchguard firewalls in the past where its really easy to just use the graphical interface and tell it to 'forward all http traffic t...

After upgrade of my 515 (not 515E), the average CPU usage went from 4% to around 12%. ACLs are same and so are the traffic patterns/load. Firewall ran 6.3(1) before the upgrade.Any idea why this could be the case?TIA,haver

Is there a limit to the number of "Named" ACL's you can define in IOS?