Other Security Subjects

I am new to cisco ids. our company already has an IDS blade in the cat 6509 switch. We also have pix but there I was told that PIX is Vulnerable to the following attacks: UDP Flood IP Range Scan DoS/DDoS HTTP attacks spanning multiple attacks 1. Can ...

I have to move our Pix525, resulting in a long distance between the outside interface, which is a pix-1-GE-66, and our ISP. The interface is now connected with a multimode-connection to the ISP-router, but in the new situation I will have to use a si...

Hello,My questions are related to the IPLOGs (raw packet payload data). I'm planning to setup IPLOG for high/medium events only because they're the ones we usually need to look into the raw data.1. When a high/medium event is triggered, it would gene...

Hello,I am looking for a document/link for setting up security on an internet router. What Access lists should be implemented; services denied both inbound and outbound. A common practice type document would be great. In particular, what are the ra...

I need to confiure Ssh on our switches with catOS. Reading up on it I guess you have to do an IP permit list. Is this IP permit list mandatory or optional. I basically just need SSH and need to be able to get to the switches from all our subnets.Than...

what can I do on the router if I want to hide the traceroute

HiI do not completely understand the functionalityu of the command "sysopt route dnat" on the PIX.Could someone explain this for me please!!!

Dear all,I have set up a VPN with IOS routers using GRE tunnels over IPSec. It seems to be working, but I am very surprised that 1) incoming on the Internet interface I can see a few GRE packets as well as many IPSec packets2) outgoing on the Interne...

Does Cisco PIX support SCTP layer 4 protocol?THX Ale

This is the error I receive when my configured address pool is in the same network as my private interface.185 07/08/2003 15:18:35.680 SEV=5 IP/53 RPT=22 IP address conflict on the network: 10.225.251.1Marking address as unusable.network: 10.225.250....

I am looking for some help with configuring a PIX 515 (6.3(1)) to allow any traffic on the outside interface (Internet) to access an FTP server on the inside interface. I have tried everything but can not seem to make this work.Here is the setup:- O...

Part of my config is as shown below: What I'm trying to do is establish connection from my dmz to the inside network. The plan is to put a dns server on the dmz so the internal one will use that for the outside dns.Currently I have a ftp server on ...

My question is related to the "upgrade" command on CSIDS ver 4.0, service pack 2 sensors.When I issue the "upgrade" command on the sensor for upgrading to a new service pack level or only to a new signature release level, are the settings made to the...

Hi all,I've just installed and configured CTR 2.0, i dont understand why it is so slow, even 5 minutes between one two clicks.It is "running" on a PC with these features:Win 2000 Pro SP3 english with all patches applied and IE 6 SP1.CPU P4 2GHz.RAM 5...

Hello,I noticed that Cisco IDS ver 4.x has many types of signatures - simple pattern matching, stateful pattern matching, protocol decodes-based signatures, virus/worms/trojans/backdoors and scans/sweeps.- How is this different from ver 3.x ? Was 3.x...