Other Security Subjects

I want to set up VPN between routers with digital certificates. I'm using MS Win2000 CA service with SCEP protocol fot CA role. I tried several times to enroll certificate from CA but all of these was unsuccessful. I didnt see any certificate reques...

I am having a problem with CSPM. The WinNT 4.0 server that it is running on locked up and had to be power cycled. This could possibly have been because the alarm database had gotten too large but this has never been a problem in the past. The machine...

I am wanting to test the auto-blocking features on the ids. I have successfully configured the device to do MANUAL blocking in which in adds ACL's to a cisco IOS router, and works great. I am interested in the auto-blocking, which no human interventi...

I have a customer who is having customer timeout/locking issues. The database server is in front of the firewall and the client is behind. In around 10-30 minutes the client will lockup and stop working?Any suggestions the we can change on the firewa...

PIX 515 with 6.2After creating translations to the inside network from the DMZ and applying access lists to the DMZ interface, the hosts on the DMZ can no longer access the outside interface. How can I allow these hosts access to the outside interfa...

hi i have a beta of the new MDC for IDS and i have an old IDSM 2.5 and and i integrated it in the MDC but i need to be in release 3.0 and i don't have a cspm to update it Is it possible to update the idsmm directly without CSPM (i don't want to set a...

I have a production 3030 that plug in to a VLAN on a cat 5500 and I loose tcp/ip to the private interface at lease once a day. I have looked at the 3030 MIB2 ethernet stats and there are no errors or colisions and the 3030 private and the cat 5500...

After installing the latest CSPM with (CSPM-2.3.3i-S29-exe.zip) to support an IDSM with 3.0(5)S23, the version 3.0(5)S23 is not selectable in the "Sensor Version" pulldown in CSPM.If you view the sig.dat file for CSPM-2.3.3i-S29-exe.zip only the foll...

A customer has sensors north of a VPN where all traffic is encrypted ESP traffic. Is this sensor able to detect attacks? I trying to determin if it would be better deployed south of VPN.

Is there a way to log traffic for an IP address on the IDSM Blade just like it is done for the stand alone sensors. I do not see a tab for "Ip logging Addresses" on my unix director.

Can someone give me some real world experiences as to the advantages of the IDS blade for the 6509 vs the standalone boxes? Also, how far behind is the 65xx IDS blade from signature updates? It seems on CCO they go a month or more before updates, whe...

Greetings,I have a need to erase a configuration from a 520 PIX that is doing AAA authentication to a non-existant server. I have used the np61.bin utility to erase passwords, but it doesn't erase the configuration.Is there a way to do this from the ...

Hi,Does anyone know how to configure RADIUS authorization with the Cisco Concentrator. With Cisco IOS, you could configure the RADIUS filter.id attribute on the RADIUS serverto point to the ACL on the router, to control what users could communicate w...

I'm interested in exluding a signature from all source addresses but one. Do I create an exlude for the signature using a source of 'IN', then create an Include filter on the single address? Are the rules hierarchical, in other words does a it make ...

I have a remote user that attaches to a Cisco 3030.Desktop is Win-XP, VPN Client 3.5.2.C-K9Internet connection is via Direcway.com sateliteUser claims that after using VPN for several weeks, and no changes to local PC, suddenly received error "VPN S...