Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Hi all,I have a SSL VPN installation wherein the ssl vpn user cannot open two http resources simultaneously (say, webmail and a webpage from a server). I am using 4.1.5 version. Is there such a limitation with SSL vpn or am I making any mistake in my...
Hi All,I have the CW installed in a solaris system, sparingly used and now we want to bring the system to some speed. First area we wanted to fix is the syslog analyser. I have the following problem and would appreciate any help to overcome this.1. I...
Hi,I am trying to get the IDS blocking working. I have enabled blocking and configured the pre-block & post-block acls on the router global configuration. I have configured the sensor with the logical blocking device, blocking router parameters and ...
After trying for many a times I am not able to get this work. I have a IDS 4210 running 3.1 and 4215 running 4.1. The 4.1 sensor works just fine with the IDS MC, but the 3.1 sensor is just not reachable through the IDS MC. I have bootstrapped the Sen...
Trying to establish the Site to Site VPN between PIX & CyberGuard firewall. IPSEC comes up only when the traffic is initiated from the Cyberguard side. 'Show crypto ipsec' shows only outbound SAs from the PIX side after the tunnel comes up. Posting t...
Hi,I would just add to the idea of Alberto here and I have worked on these scenarios practically. 1. The above solution can be expanded to have two switches at both the legs of the IPS, so you have highly available switches as well. 2.STP will automa...
Hi,I would highly recommend CS-MARS for your requirement to use a log analysis tool. The tool is very good in terms of query/report and analysis of all the data that the syslog throws at you.It offers very easy and nice to comprehend GUI to swift thr...
Hi Gilles,Thanks for the response. I think I misunderstood your initial response.Will increasing the ssl session cache-time accelerate the backend server (meaning fewer ssl calculations) and are there any real-world drawbacks.TIA.Murali
Hi Giles,I have a followup question to your response and thanks in advance for your response.1. SSL aggregation with SSL Module on the CSS 11503.Is there a ratio by which we can control the backend ssl connection between the module and the real serve...