Other Security Subjects

I had built a web-based app to allow our network admins more easily administer our PIX, which used the conf net command to suck down configuration changes from a tftp server. After upgrading our PIX's software from 5.2.3 to 5.2.8, it doesn't appear ...

Is it possible to restrict access to certain commands on a per user basis using Tacacs+ for AAA? Basically we would like to permit local support staff to move ports between existing VLAN's without letting them use any other commands. I have read abou...

First, any help would be greatly appreciated.I have been assigned the task of installing a firewall that involves a few things that I may be unfamiliar with (i.e., PPPoE, or VPNs perhaps). At one location (building), I have a Cisco 1720 router confi...

How does Cisco IDS handle this?Fragroute Fools Intrusion Detection SystemsFragroute, a new tool posted by Arbor Network's Dug Song, manipulatesdata packets allowing them to slip past firewalls and intrusiondetection systems.http://news.com.com/2100-1...

Hi, How many servers can be set up on DMZ? I have failover set up between 2 515s, each has 3 interfaces. In order to have failover to work with DMZ, should I need another switch to connect the DMZ ports of the 2 Pixes and rest of the servers ??...

I get the following error..."remote peer is no longer responding"I am trying to set up VPN using the Cisco client instead of using MS. So I set the group up and I follow the directions to the tee. I configure the client as well per the directions. I ...

I have IOS firewall on my Cisco 806. IOS firewall dynamically creates ACLs according to traffic coming from the internal LAN. But when the sessions are over, the ACLs are still appearing in my show access-list command, and they don't clear/expire/tim...

There's a requirement to encrypt data between a user's PC connected via 2651 FE I/F and voicemail server that is connected via 2651 with 32-port Async NM. Can encryption only be turned on for this one application connection? Or will it be enable for ...

I am using aaa and radius to authenticate to my routers. What I would like to be able to do is provide my username and password and have the router go right into privledged mode at login without further intervention. I have setup my Radius server as ...

Has anybody know if the CSPM can handle ACL's with port range insted of specific port?

With the new release of PIX 6.2, PDM 2.0 is needed but the latest version of PDM posted for download is 1.1.2. Does anyone know where PDM 2.0 can be obtained?

Hi,II'd like to know what is exactly replicated with the stateful failover, I've readthat are replicated the tcp connection table (and if enabled the http connection)...can anyone tell me something more...for example a Ipsec vpn I think is lost ... ...

How can i keep track of down time on the director?

Recently our ISP switched our plan from a statically assigned IP to DHCP (that renews the same address). I'm not a CCNA, but the PIX 506 we have was relatively easy to setup. Now that the outside address has to be grabbed from DHCP I'm having probl...

I seem to remember reading somewhere where SYSlog and PDM couldn't be run on the PIX at the same time.....is this still true? I would like to use PDM but I also need the PIX to write to the syslog server.Dave