Other Security Subjects

We have a cisco 7204VXR (NSE-1) processor, connecting to Internet, running enterprise IOS with firewall feature set. Has 256DRAM installed and six serial interfaces. When we tried to implement tcp inspect on two serial interfaces we find out that the...

Dear all,I have a PIX 515e with 3 interfaces (LAN, DMZ, Internet). The DMZ is on a 10.0.0.0/8 network, which is now causing issues when packets that want to go out of our Internet interface need to talk to other 10.0.0.0 addresses (this interface is ...

Just a quick question from a wireless newbie- how likely is it that someone from outside could get into a wireless network with only the following configured? MAC address filtering with 3 specific MAC addresses of wireless devices in use. Changed the...

This is probably just something else that I do not undrstand about the pix, but want to know what is going on. I am getting log message 305009 "Built static translation from inside: some-IP to outside: same-IP" from non-existant hosts and subnets. Fi...

I mean some time we have some need to turn inside interface of PIX firewall to remote site and turn outside interface into inside of HO. If we strictly aware the traffic with ACL, what's else we should concern or any reason to prohibit turning around...

Does anyone know if SSL connections will be an option for the 3000 series later this year. We are looking into a VPN solution for our company and we would like SSL as a option with the VPN. I read in the link below from Cisco that it might be an ad...

Hi,My routers are all affected by the recent IOS vulnerability. I have implement the access-list recommonded by Cisco on my Internet router. I also have a internal router but i have not apply any work around on this router as there are a lot of appl...

i want to configure span but i need to know which is the least (cheepest) switch which supports span .

We have many sensors on the network and would like to monitor health using applications like HP OpenView NNM or What's Up -Gold. I understand we can certainly setup ICMP discovery and regular ICMP echoes to find out if a Cisco IDS sensor (control int...

Signature 6250 false positivesafter an update from S47 to IDS-sig-3.1-3-S48.zip, the sig 6250 appears incorrect. the service ports are not correct for the signatureany comments regarding this signature are welcome>.SigWizMenu* setStor...

Hello,If I modify the action of the signature 4701 (MSSQL Control Overflow) from "ZERO" to "reset/shunhost", I don't see any host in the host manual blocks panel.If I choose "shunhost", it's ok.I don't understand why. With others signatures pre-defin...

VPN 3000 Idle time out set to 30 minutes, still users can not disconnect at idle time out.I am running version 4.0.Any suggestion why?Regards,Jayesh Bhakta

I know the differences in working. But can any one tell me where is each used?And, who decides which mode of FTP I will be using if I happen to dowload something.Kindly help.Regds,Nikh.

PIX 6.31. Two interfaces: inside/outside. Config is insdie>pix>rtr>inside. No requirement or desire to do NAT and translation should not be on. Access lists are pretty much allowing all IP to flow between the networks. Traffic for one client on the i...