Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
All,I have a css11501 and I have a situation where there are 2 servers in disparate datacenters, that I would like to balance requests to, based on URL requested - using http redirects.Clients come in and request http://X.X.X.X:4100/blah/whatever.asp...
I have a css11503 running 7.30.0.05 and I am trying to install a custom script (http://www.cisco.com/en/US/products/hw/contnetw/ps789/products_tech_note09186a00801e1dfb.shtml)I login to the CSS, execute: script record http-test <enter>However, when I...
I am wondering if there are any other folks out there actually managing/monitoring their Cisco IDS environment (IDSMC/VMS) under Solaris? If so, how many sensors do you have?Anyone? Anyone?Thanks,-WP!
The accellerator hosts the target websites SSL certificate. The SSL session is established with the accellerator. The accellerator forwards the clients requests (http) to the destination webserver. Your IDS sits behind the accellerator and gets to...
Hopefully you dont have a need to apply different rulesets to those segments -- as Cisco still cant do this. Anyone else faced this problem? How are you dealing with it within the Cisco product line? If I have a sensor with a quad card and I want...
Depending on your needs -- it may be appropriate to install an SSL accellerator. These devices decrypt SSL and convert it to standard HTTP so you can inspect it with IDS (its purpose is to remove SSL crypto overhead from the web hosts, but hey it wo...
I'd script it to kick off a tcpdump logger when it sees it on the network -- depending on the load on your sensor you could do something with a tcpdump stream like:tcpdump -qe -i eth0 Which will log src and dst mac of the last hop int.Output that to ...
