Other Security Subjects

Hi,I have some trouble in the perimetral network. We have installed a Cisco PIX515 with three interfaces. The interface outside is connected to a lan where there are two Internet routers (2621, 2621XM), each of them with its functionality (they are n...

i confige ipsec with two router connected by lan :1)router1 configuration :version 12.1no service single-slot-reload-enableservice timestamps debug uptimeservice timestamps log uptimeno service password-encryption!hostname Router-7206!enable password...

Are there any standards for setting these figures? The servers are domain controllers, web servers, mail, and file & print.thanks,biz

I have a PIX 515 in a COLO for our website. Nothing has changed from yesterday, yet yesterday I could map to shares on the machine for the website, today I can't. anyone ever heard of this happening, Reloaded router to no avail. None of the PIX en...

Hi,I recently upgraded our Cisco Secure AS to ver 3.2 but have encountered problems. I have users who authenticate to a checkpoint NG FP3 firewall, which passes the authentication to cisco secure (radius) and cisco secure authenticates against a Nove...

I need to setup VPN’s to about 2000 sites. Each site will have an IDSL line installed that will be used to connect to monitor network devices and servers. Some of the remote networks will be using the same network block. I am looking to know what ...

I've got my IDS setup and running, but now when it adds anything to the ACL, it adds this:10.1.1.1 deny any logwith the log in there, it's generating a lot of spam on the console when you are trying to use the router. How do I stop this console logg...

When I look in my event viewer, nothing is there. The devices were discovered. It's a new install of IDS4.0 and ciscoworks2000. I've got a 4220-E and a 4210 that both show up in the devices tab in Security Monitor. If I select "monitor", "events"...

I am forced to try and configure a pix 525 ver6.3 (7 interaces) to have two "outside" interfaces. We have configured using the standard "outside" interface to handle all traffic(source is internet)inbound to the "outside" interface on the firewall. W...

Hello,Before you even start connecting two PIXs together for failover operation, i was told that the activation key is what distinguishes a primary pix from a secondary. Is this true? Aren't firewalls independent from each other meaning that a fire...

hi.We have a catalyst 6500(sup2, msfc2, CatOS + MSFC-IOS)What is difference Case-1 and Case-2 ? (tcp/135 port filtering)Which is correct?[Case-1] set security acl ip VACL deny tcp any any eq 135 set security acl ip VACL permit ip any any commit secu...

How do I debug for a specific port number on an interface? I've been asked to monitor port 135, to see exactly how much activity there is.

I am running a 515E firewall using S/W 6.2(1)We are managing a network on the inside of the F/W that is 10.0.0.0/8.On the outside we have a number of statics -static (inside,outside) tcp 203.42.151.10 ssh 10.17.100.10 ssh netmask 255.255.255.255 0 0 ...

using standalone (N)IDS what are the options (pros-cons) for the connectivity design. All 10/100 switched environment for this application. portspans,VACL's,TAP's or specialized active IDS balancer's. A broad question, but I am looking for some input...

I would like to filter activex traffic to any other site except for 207.46.0.0/16. If I enable filter activex either I will filter all or only filter specific site define on access list. Is there any way to allow this segment 207.46.0.0/16 and block ...