Other Security Subjects

Is there a way to configure the PIX 506 to use the Domain user rights to allow access through the PIX to the internet? I have ordered a 506, and asked to have it configured to use my domain rights to allow internet access based on a NT domain group,...

Hi All,I have CSPM ver 2.3i (IDS). But How to set up a IDS network. What should I need besides CSPM ??DO I Need a Sensor Server ? Can a server which is installed with CSPM be a Sensor Server ??thanks

OK, time to revisit my shunning project. :-)The last time I tried this, my router was smoked. Now, fortunatly, I have the Director at 2.2.3, and the sensors are at the latest release.To allow the throttling of shun requests to my router, I have set...

My IDS sensor is the 4220-E running 2.5(0)S0. What is the correct packet capture device for this sensor? My documentation gives the correct device for the 4210 and 4230, but not for my model. Thanks.

I'm having trouble getting SMTP AUTH to work on our network, even across network segments that have no specific access-list rules between them. Perhaps there's something in the CBAC setting that prevents AUTH from working properly?Initially...Our ma...

My internet perimeter router has an access list that permits traffic inbound destined for UDP ports greater than 1024. From what I can tell this is needed for web browsing. Does anyone have any knowledge as to why web browsing needs UDP ports greater...

Hello,I'm looking for a performance comparison between reflexive ACLs and CBAC (e.g., which method filters traffic faster and by what factor). A similar type of comparison between CBAC and regular ACLs is presented in "The Performance of the Cisco IO...

Found the release notes for cspm 2.3.3.i on the Cisco Documentation, when will the upgrade be available?With the current version of cspm 2.3.2i having a serious problem/bug with the Event Viewer, and the latest Signature 8 is out, what version of csp...

I've setup a VPN-PPTP connection for a remote user with Win2K PRO and a central site with a PIX .The logon proces works fine and the user gets an ip address correctly as the following line from PIX's log states"%PIX-6-603104: PPTP Tunnel created, tun...

Reading these messages it seems that there are things that don't work yet. Is it possible for a VPNClient3 to get to a network protected with a PIX506 v6.0(1), with a Cisco2501 router between the PIX and the ISP's Kilostream line?Protocols 50 and 51...

Hello, we have used up a full class C with static mappings to servers behind the PIX 520. We have another Class C on the same circuit. Can we start adding mapping from that Class C to servers behind the PIX or will it not route?Thanks!Rich

What commands would you suggest to add to a router that is exposed to the Internet to keep it from being attacked? I have been given the following suggestions:1) Add an access-class list to line vty 0 4 to ONLY allow for internal users to telnet to ...

Hi ,Hope this mail finds you all in good health.First of all I would like to ask if It is safe to have a server , say a Mail server to which I have mapped a live IP on the LAN. ie , I have a mail server with a live IP , in the Pix 515 I have configu...

hello, im a student currently taking a course for my ccna. the class does not cover conduits and i am curious as to what they are? i gather they are some what like access lists but what are the differences and similaritys? what scenarios would a c...

I have a request from a user to open port 1494. Our pix has conduit commands. The inside network is 10.1.0.0 - specifically 10.1.16.0. What conduit command would I need to use?