Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
See USCert (VU#297462) http://www.kb.cert.org/vuls/id/297462Is there a signature about to be released to detect these malformed JPG/JPEG attachments? Thanks,Don
Can anyone tell me if I can add a second fiber card to a 4250XL (in addition to the one it came with)?I have clustered PIXs in an Active/Passive failover configuration. As such, only one firewall is passing traffic at any given time.Anyone? Thanks i...
I was wondering if I could elicit some input from those of you that are successfully exporting and maintaining your sensor configs (ie. config backups and diff history). Do you utilize a script and use the sensor's built-in 'copy' function, or what?...
I am about to begin the migration of several sensors (read as: more than 40) to a new subnet (C&C - Out of Band Network), due to a need for a larger number of available IP's. For obvious reasons I don't want to have to reinstall all of my sensors......
I feel your pain. CiscoWorks is a substandard management platform, at best, for managing Sensor configs. Another issue that you will/may discover is that you cannot use variables with IDS MC. For these reasons and more, I use IDM or CLI to configu...
I filter worms/spam/virus on externally facing sensors AFTER I determine that they are being handled by the appropriate filter devices. Just be careful not to carte blanche filter all subsignatures until you understand what each does.Hope that Helps...
During FTP, a 'port' command can be utilized to specify the clients IP address/port from the FTP server to the client. You can actually specify any IP address/port using this command. This could allow someone to use the FTP server to perform a port ...
The process is as simple as: Assigning one port on your switch to be the 'monitor' port, and specifying which ports will replicate their data to the 'monitor' port. Then you just cable your ids sniffing interface to the 'monitor' port.Follow this l...
Brent-I don't have any prior history with a 4220, but I do know that version 4.1(4)S47 requires 512Mb of RAM to install. I would suspect that is the problem you are experiencing. Cisco offered free memory upgrades to 4210 owners, but I don't know a...