Other Security Subjects

Our company monitors the internal network for alarms that egress the network to the Internet domain. The internal sensor needs to track all alarms that have a destination of the HTTP proxy server. This proxy Server uses a non-standard destination por...

Any ideas??? I install IDS device manager on a Windows 2000 client. I am able to manage the IDS sendor thru IDM without any issues. I download IDS event viewer from IDM onto the same Windows 2000 client and install it. When I add the sensor as a ...

I have several remote sites that have a pix 506e that connect to the headquarters office to a vpn 3030 concentrator. Currently we are using 3des encryption. I'd like to use AES 256. Do you have any sample configs using aes 256 from the pix point ...

i'have à cisco sensor 4235, but i dont have with un soft for Director host (like CSPM or an other) . please do you have any idea how to admin to vein and admin alarm witout those softs( CSPM over win 2000). for exemple is winsyslog is adequate to the...

Hi, my customer applied S52 update to 3 x IDSM2's all running identical 4.1.1 version. Following update it seems all 3 sensors successfully applied update but no longer seem to be able to communicate with VMS Server running Security Monitor. Two ...

I'm trying to set up my PIX so that the traffic from the inside goes to the outside interface(being Pnat'd in the process) then connects to a statically mapped outside IP to a DMZ internal IP.Like,192.168.1.0(Inside network) -> 10.0.0.250(outside pat...

Anybody know what's the best way to blcok AOL if NBAR is not an option? Thanks.

Hi,Can someone provide information on how to block access to Kazaa with access-lists on a internet router.Thanks.

Hello, I currently operate a large 3.1(4)S53-based sensor network and am slowly migrating to 4.1. I am having a slight issue in that I have a highly tuned signature set, and I can't see any way (through VMS or from the sensors themselves) to export...

HI, yall.I am just wondering, everytime when i make changes to the sensor configurations, eg: signature configs or user configs, the device manager will be unavailable for a few minutes.During these few minutes, does the sensor actually do a cold boo...

I have been told that for the upcoming CCIE security lab, once they add the IDS sensor to it, will only focus on IDS device maanager and there will be nothing on the policy manager. Can anyone confirm this? And being new to IDS, is this also the ca...

After doing MS RPC patches on NT4, Policy Manager stop log any event views. I believe it is a API has been changed and stopped functioning. Any idea ? thanks

Hi,I discovered it is possible to telnet to port 6000-6032 and 4000-4032 to start a console session to devices attached to the NM32A card. This bypasses my security of allowing only ssh to vty 0 4 and then reverse telnet to the attached consoles.How...

Do you upgrade the FWSM the same way as the stand alone PIX using the "copy tftp flash" command ??Thanks

We currently have a Pix520 , v5.3(1). It is setup with 3 interfaces (internal, external and the dmz) with NAT.We have another router that connects to the internet(not currently plugged to the PIX) that we are planning to use in case our ISP is down (...