Other Security Subjects

Is there some way to set an idle timeout for an IOS-2-IOS, site-2-site VPN such that when there is no 'interesting' traffic that meets the criteria specified in the crypto-map access-list for a specified period of time the tunnel is torn down?The isa...

Hi..I Have a tipical static nat when my internal server (www, smtp) have 10.1.1.1 and a Pix do a static NAT10.1.1.1 = 200.200.200.200, all fuction well but if I want access to my server in the internal network if I put 200.200.200.200 not work I ne...

Hi,We have a 1720 with Pix & VPN.I'd like to be able to configure an access list to deny users from using Windows Media (online radio stations etc), as I've found this is increasing ISP costs.Also is there a way to block Spy-ware, e.g Gator, 180Solut...

Hello all - Our comms group turned off RIP at the routers yesterday and our IDS system started dropping. The Director was unable to communicate. I looked over the configuration files on both the Director and the Oracle DB servers and saw that RIP w...

We have a client that only has a single public IP address which is also the address of thier mail server. We are using an ADSL 827 router for thier internet connection and using NAT overload for general internet access from the local LAN and static N...

Can anyone tell me how I would connect directly to the database that comes installed with VMS 2.1? What ODBC drivers should I use? I'm running it with the default installation settings (except for the password), so I know the password and port (10033...

I have a k9 4235 setup to shun host/connection using an interface on a cisco 6513(ver) 12.1(19)E I have updated sig and patch to Version 4.0(1)S48 on the ids. A userid/password that has access to the router/config terminal access level is being use...

i am looking for an content aware mechanism that would detect and block malicious codes in HTML pages. Needs to filter url as well...someone has experience with this?S

We have an IOS router with links to multiple IPsec peers.One of these IPsec peers is a customer router which is used by them to connect to us as well as other IPsec peers.They have "crypto isakmp keepalive 120" configured on their router but we don't...

Hello,is it possible to terminate a crypto map on an interface that is part of a VRF process?ThanksRegards Roberto

Hello,How I can extract logs from IDS event viewer 4.0 and how i can sort reports (nb:softaware) to analyse for example coutries of attack.Thanks

Is it possible to translate destination ports traversing the PIX? I have a situation where I need to translate destination port 80/tcp to 30080/tcp on outside interface going to a DMZ (public IP range).Furthermore, this should only be done for specif...

What is the best way to configure an ACL in the router to let DNS traffic pass from the internet to the internal network? I emphasize that internal network uses private ip addresses and that the router is doing NAT overload.I have tried various confi...