I was wondering whats the difference between shunhost, shunconnection and reset in IDS alarm actions?

We are trying to match anything that is not equal to a known string in a tcp packet. For example, known string is Usr=EM. If we receive a packet with say Usr=AB, i should get an alarm.I made the following regular expression to do this and I tested ...

We have about 1000 VPN connections to be made. We also want to assign a fixed IP to every client based on his username. Is that possible? Do we have to create a separate group for each user and assign a single IP pool to each? Is there another wa...

We are trying to setup PIX to use certificates issued by Microsoft CA for our remote VPN clients. But we cannot get the PIX to even ca auth the CA. We are using an enterprise subordinate CA. The root ca has a 4096 key and the subordiante has 2048....