Other Security Subjects

I keep getting this syslog message from one of my PIXs:No translation group found for tcp src outside:(host1)/6464 dst inside:(host2)/2326My ACL is:access-list inside_access_in permit tcp any object-group (groupname that includes host1) eq 6464I'm no...

Here is my setup:Internet -> Pix -> DMZ InterfaceI have a nat of 10.10.1.10 that nats to 10.20.1.10 (address are just for example)My fw outside interface has a ip of 10.10.1.1 and my dmz interface has a ip of 10.20.1.1. From my workstation at work I ...

I have two servers on the dmz interface both with static nat tranlations. One of the servers needs to send mail to the others static address because of dns lookups. Is it possible to allow this traffic in. Would this be done with the alias command.

Hi,I updated my VPN 3000 concentrator to version 4.1.2 in order to test the Web VPN. I followed the Cisco documation to allow the https management and the Web VPN on the public interface. Choose the following options (3): allow management https sessi...

I have run into an issue, where the first time you try to run the install of 4.0.3F after the vpn5000 is removed, the install stops and says it needs to reboot before the install can continue. I need to find a manual way to clean up the vpn5000 so th...

hi i have one 3640 , 2610 , 2924 devices in my LAN . these devices are not having system clock calender. I configured my PC (windows 2000 professional) as providng Time service in LAN. I am not syncing over WAN ,,it is inside my LAN. I have used jus...

The event Non SNMP Traffic (ID: 4508) is meant to only trigger on traffic with a destination port 161 but have seen events when the destination port is other than 161. It appears to be an error. I am using signature set 4.1-3-s82.

Hi,We have the interfaces called DMZ (low security interface) and WAN (high security Interface) in our firewall. When i configured the following line to enable access from DMZ to WAN, its not working. Can somebody help me.access-list dmz permit ip ho...

VMS is showing a number of 4508 (Non SNMP Traffic) alerts, and yet VMS shows the destination ports as 9300, 137.The description file indicates only triggering when non-snmp traffic is detected on udp port 161 only.On the probe itself, a show settings...

There are limit for a DB of a sensor 4235 ?how to clean the database ?Application Partition:Cisco Systems Intrusion Detection Sensor, Version 4.1(3)S82OS Version 2.4.18-5smpbigphysPlatform: IDS-4235Sensor up-time is 28 min.Using 899903488 out of 9215...

I'm currently seeing daemon processes such as packetd and loggerd crash on a daily basis. I was wondering if anyone had any insight as to why this might be happening? Going through error logs I found this under packetd:04/07/2004 15:19:53UTC W WARNIN...

6509 with Sup720 running hybrid mode + FWSM:Created secured vlans on 6509, and MSFC interface vlans are down. Removed secured vlan from FWSM, MSFC interfaces are still down. Have to remove and reinstall interfaces.After that can't secure those vlans ...

HiI'm experincing a high number of TCP Packet, No Flags from different machines to most of my clients on port 80.Has anyone experinced this and what was the solution to this as i've got a feeling that this might be false positive alerts.One more this...

I didn't find Object groups and Turbo ACLs on or pix 515E Version: 6.14. What models & version supports these two features?