Other Security Subjects

Cisco does have a conduit to access list converter, it is hidden inhttps://www.cisco.com/cgi-bin/Support/OutputInterpreter/home.plUnder "Technologies" select "PIX" and then paste the entire PIXconfiguration into the appropriate field. I would like t...

Hi,For internet connectivity we have PIX-515E and router 1750 on our network we don’t have any proxy server running on the network and I don’t want to implement proxy server.PIX IP has been defined as internet gateway in the TCIIP settings of worksta...

I get these all the time:Sep 19 2002 01:05:37: %PIX-3-106011: Deny inbound (No Xlate) tcp src outside: (some IP address on someone elses network)/80 dst outside:(public nat address on my network/3900This occurs about every minute or so, and the dst o...

So with the ever increasing number of ports that i would like to block from my students I'm wondering if there is a way to block all, then only allow the ones that are necessary. I'm fairly new to this so forgive me if this idea is really stupid.Rig...

Can a 3rd nic be added to a 515 restricted PIX WITHOUT the restricted to unrestricted upgrade option? PIX-515-SW-R-UR=  515/515E R to UR License Upgrade (includes VAC, 32MB RAM)  I have a client that is questioning it and I wanted to verify it for...

My database keeps stopping due to something with EDI. It is version 233i-S31 on an NT server. The actual message in the Event Viewer is "Policy Database is shutting down; EDI is not processing messages". Eventually EDI will come back up and the da...

I have a PIX 506, trying to establish a tunnel to a Netscreen Model 50. When trying to bring the tunnel up, Phase 1 comes up fine, but getISAKMP: reserved not zero on payload 5in phase 2. Eventually, the tunnel comes up, after 4 or 5 minutes, and 4...

While a reflexive acl theoretically can prevent ack tunneling how would one implement that on the Pix firewalls? Is it more appropriate to apply reflexive acl's on the interior routers? This question is in regards to the 'newly released Windows 2000 ...

Hello all, I'm trying to figure out where someone plugged our sensor's monitoring interface in so I can span the port. Unfortunately no one described the interface and I can't find any docs with that info. So I figured I could grab the MAC address ...

I configured a VPN connection (native Windows PPTP connection) between my home PC (Windows XP Professional) and my office VPN server (Windows 2000 Server). I connect to the Internet via a Cisco 827-4V router (IOS 12.2(8)T4) and my ISP assigns to it a...

Does CiscoSecure 2.3(6) for Unix support Oracle 9i?

I have been reliably told a Cisco Secure IDS can actually monitor two switches at once by direct physical connection (Note we are not and will not be using IDS modules in the switches, but physically seperate Cisco Secure system).Unfortunately none o...

I have a user connection to our VPN Concentrator 3015 using the CISOC VPN client but he is going through a Microsoft ISA Firewall. Are there any special configurations that we should be configuring on the Microsoft side. For some reason we cannot con...

I am using IDS Host Server Version 2.0.1 and have installed it on a server with Windows2000 advanced server and Service Pack3. The following message is viewed in the Event logenterceptAgent Failure: Incompatible service pack. Please read the ReadMe f...

My customer uses IDS 4210 with 3.1(3)S31 installed and uses CSPM 2.3.3i.Until 1 week ago there was no problem but he says when he want to block manually some hosts or networks at Router via CSPM Event Viever he gets Error timeout waiting response.He ...