Other Security Subjects

Ok am in the process of setting up my first 515e and struggling a bit. I have set my outside route of 0.0.0.0 0.0.0.0 x.x.x.x.x (being my router ethernet address) 1Now the way I under stand this is that anything that goes out that is not needed to r...

Running Pix Firwall software 6.2 on a Cisco 506E can I deny incoming tcp traffic to an entire Network? For example, how would I configure the Firewall to deny all incoming tcp traffic from any host on 10.10.x.x and 10.11.x.x? Do I create an ACL for...

If I want to block attacks that sense by the IDS thru a router, what configuration should I place in my router?Is there any Case study on IDS?Thanks!

Hi,Does anyone know what version of software AES was introduced into the PIX and Concentrator?Thanks in advance....

We connected client-to-server over VPN through the ADSL-internet-link.A DHCP-client send DHCP-request packet to DHCP server on the server-side-network. I thought, we need only to config "ip helper address".But the client can not receive IP from serve...

Hello, I am using the Cisco 3.5 client to connect to a 3015 Conc. From DOS I could run: VPNClient Connect VpnProfile And I get connected. But right before I get conencted I get a message: "XYZ MainFrame access. For Authorized users only. Do you wish ...

Hi all,Our VPN 3015 is getting a lot of these errors. Is there anyway I can find out which client is causing this:59580 07/11/2003 15:29:52.040 SEV=6 IPSEC/7 RPT=23125 IPSec ESP Tunnel Inb: Replay window failure - discarding packet!Our concentrator i...

I've updated few sensors from 4.0.2S47 to 4.1.1minS47 two days ago.I can't get sensors working after update: they report no problem but don't see any traffic on monitoring interface.I've tried to reset a root password and tried tcpdump from eth0 but ...

Pretty simple question for you guys. I want to upgrade the OS of my 506 pix firewall which is currently running version 5.2(4). I've been to the software download page, but it doesn't clearly specify what file is what. All I want is the most recent v...

HiWe have two cat6k in the core with a layer 3 routed link between. The design is such that if an uplink fails the vlan on the msfc goes down, this is due to the vlans being unique on each switch in the network.My question is though when we install t...

We are wondering what the significance of the "ZZ" characters are in the HEX output of the alarms files (3.0 code)? We noticed that their is also a "==" in the base64 encoded information and we know that these are padding characters in base64 (4.0 c...

Is it currently possible to shun the Destination IP of an alarm?For example, if one of my users tries to open a Kazaa session with a remote site, alarm 11005 fires. In this case the user is the source and the kazaa server is the destination. Curren...

Hello,Can anybody tell me whether Cisco IDS and Netscreen firewall 1000 are compatible each others.Thanks in advance.