Other Security Subjects

We have an IOS router with links to multiple IPsec peers.One of these IPsec peers is a customer router which is used by them to connect to us as well as other IPsec peers.They have "crypto isakmp keepalive 120" configured on their router but we don't...

Hello,is it possible to terminate a crypto map on an interface that is part of a VRF process?ThanksRegards Roberto

Hello,How I can extract logs from IDS event viewer 4.0 and how i can sort reports (nb:softaware) to analyse for example coutries of attack.Thanks

Is it possible to translate destination ports traversing the PIX? I have a situation where I need to translate destination port 80/tcp to 30080/tcp on outside interface going to a DMZ (public IP range).Furthermore, this should only be done for specif...

What is the best way to configure an ACL in the router to let DNS traffic pass from the internet to the internal network? I emphasize that internal network uses private ip addresses and that the router is doing NAT overload.I have tried various confi...

I did a port scan on my router and it reported that the router is listening on ports 25 & 110. I don't have any mail services running behind the firewall. Why would the router be listening on these ports and how do I shut them off?I am using ACLs & C...

I have a client who we just put a new DMZ card in for on a 515. Moved a machine out to the DMZ and that server can be accessed from the outside no problem (web server). The problem is, that there is no access from the LAN to the DMZ. I have compar...

Hello,Is it ok to create static mappings for mutiple blocks of IPs on the pix, or do the static entries all have to be within the range of the pix's external interface IP?ThanksJeff

Suggestions?.2 and .3 are W2K servers with the correct mask and gateway (.1 the PIX)110001: No route to 192.168.161.2 from 192.168.161.3PIX configip address DMZ-slot:3 192.168.161.1 255.255.255.0Why would the PIX be picking up these packets when the ...

Is it possible to telnet to a pix 501 from the outside.

I am using the configurations given in the following linkhttp://www.cisco.com/en/US/partner/netsol/ns110/ns170/ns171/ns27/networking_solutions_white_paper09186a008018914d.shtmlBut i am not able to see the IPSec SAs in the routers.The output of sh ...

I have three questions here all related to the policy for a Cisco IDS appliance.1. For a new install, when I initialize a Cisco IDS sensor, does it have the default Cisco IDS policy? By default policy, I mean most signatures enabled, some signatures ...

Is there going to be any comprehensive documentation released on version 4.0 of the IDS sensor?The is no documentation on this new RDEP protocol or the architecture of the device. Quite honestly, the documentation is really shoddy for version 4.0.Qui...