Intrusion management Questions


Found Trojan.ByteVerify on my computer
Hi All, Symantec recently discovered Trojan.ByteVerify on my computer. I run system checks weekly and am always cautious about the e-mails I open, the web sites I go to and what I click on, so I was pretty surprised to find I had a Trojan. It was quarantined and removed, but I’m worried about what [...]

Answer Question   |  June 24, 2010  10:20 AM
Administration, Architecture/Design, backdoors, Compliance, configuration, CRM, Current threats, Disaster Recovery, Documentation, Features/Functionality, Firewalls, Forensics, Hacking, human factors, IDS/IPS management, Incident response, Installation, Intrusion management, Management, Network security, patching, PEN testing, Platform Security, Policies, Risk management, Security, Security Program Management, Service and support, Signature updating/Management, Spyware, Trojans, Viruses, VPN, vulnerability management, Wireless, worms
asked by:
0 pts.

Backup of Router & Pix IOS
How can we protect our router & pix firewall & how can we recover the ios when ios is totaly corrupted. how can we take backup of ios through tftp server. Please guide step by step as i am new to router & pix firewall. can u provide me website link from where i get [...]

Answer Question   |  April 19, 2005  5:08 AM
Administration, Cisco, Firewalls, Forensics, Incident response, Installation, Intrusion management, Network security, Networking, Service and support, VPN, Wireless
asked by:
0 pts.

Internet Explorer vs. Firefox
Hello, I’m the Assistant Editor on SearchWindowsSecurity.com. I’m looking to start a discussion about what browser people are using and why. Also, is anyone considering switching from IE to Firefox, or are your plans to stay with IE? Here’s some food for thought… As of Feb. 2005, an estimated 35 million users had switched from [...]

Answer Question   |  June 29, 2012  2:14 PM
Addamark, Administration, Aladdin Knowledge Systems, Application security, AppSec, Architecture/Design, ArcSight, Bindview, Biometrics, Caymas, CipherTrust, Compliance, Computer Associates, configuration, Courion, CRM, Cylant, Database, DataCenter, Desktop management applications, Desktops, Digital certificates, Disaster Recovery, Documentation, e-Security, Emerging technologies, Encryption, Enterasys Networks, Entrust, Exchange, Features/Functionality, GuardedNet, Hardware, Host-based IDS/IPS, IBM/Tivoli, Identity & Access Management, IDS vs IPS, IDS/IPS management, Imprivata, Installation, Instant Messaging, Intellitactics, Internet Security Systems, Intrusion management, Juniper Networks, KavaDo, M-Tech, Magnifire, Managed security services, Management, Maxware, Microsoft Windows, Netegrity, NetForensics, NetIQ, Network Associates, Network-based IDS/IPS, NFR Security, NGS Software, Novell, Ounce Labs, Outsourcing, Outsourcing/Managed services, Passlogix, patching, PEN testing, Platform Security, Policies, Product evaluation, Product/Service evaluation, provisioning, Risk management, RSA Security, Sana Security, Secure Coding, Security, Security management, Security Program Management, Security tokens, Servers, Service and support, Service contracts, Service evaluation, Single sign-on, Snort/Sourcefire, SPI Dynamics, StillSecure, Tech support, Teros, Thor, Tripwire, TruSecure, Vendors, VeriSign, VPN, VSecure, Vulnerability Assessment & Audit, vulnerability management, Watchfire, Waveset/Sun Micro, Windows, Windows XP
asked by:
0 pts.

Safe user sandbox?
*This question is from a SearchWindowsSecurity.com reader: I’m in a position to redesign our IT systems (network, servers, PCs, software, etc.) this summer, and I am undecided on which path to take. I’d like to disconnect our systems from the Internet so that we don’t have to deal with all of the garbage that comes [...]

Answer Question   |  April 13, 2005  2:15 PM
Application security, backdoors, Biometrics, Compliance, configuration, CRM, Current threats, Database, Development, Digital certificates, Disaster Recovery, Encryption, Exchange, Hacking, human factors, Identity & Access Management, Instant Messaging, Intrusion management, Management, patching, PEN testing, Platform Security, Policies, Product evaluation, provisioning, Risk management, Secure Coding, Security, Security Program Management, Security tokens, Single sign-on, Spyware, Trojans, Vendors, Viruses, vulnerability management, worms
asked by:
0 pts.

I’ve been hacked — I think….
I’m an IT administrator with a little over 500 end users, running Windows 2000 and XP. One of our users is experiencing a problem with her Internet connection suddenly dropping for no apparent reason. When she restarts her computer, everything works fine for awhile, but then the connection drops again. The funny thing is, she’s [...]

Answer Question   |  August 2, 2009  9:52 AM
Administration, Application security, Architecture/Design, Bigfix, Biometrics, Cisco, Citadel, Compliance, Computer Associates, configuration, Configuresoft, CRM, Cylant, Database, DataCenter, Desktop antivirus, Desktop management applications, Digital certificates, Disaster Recovery, Documentation, Ecora, Encryption, Enterasys Networks, Exchange, Features/Functionality, Firewalls, Forensics, GFI, Hewlett-Packard, Host-based IDS/IPS, Identity & Access Management, IDS vs IPS, IDS/IPS management, Incident response, Installation, Instant Messaging, Internet Security Systems, Intrusion management, Juniper Networks, Managed security services, Management, Microsoft Windows, Network Associates, Network Elements, Network security, Network-based IDS/IPS, NFR Security, Outsourcing, Outsourcing/Managed services, patching, Patchlink, PEN testing, Platform Security, Policies, Product evaluation, Product/Service evaluation, provisioning, Redundancy, Risk management, Sana Security, Secure Coding, Security, Security Program Management, Security tokens, Service and support, Service contracts, Service evaluation, Shavlink Technologies, Single sign-on, Snort/Sourcefire, St. Bernard Software, StillSecure, Symantec, Tripwire, Vendors, VPN, VSecure, Vulnerability Assessment & Audit, vulnerability management, Wireless
asked by:
0 pts.

PIX – Allow UDP replies in.
Hi All, The president of my company has started to use skype (www.skype.com). There is a function in the program to do file transfers. When we try that the program show that it has to relay the transfer and when it does that it limits the bandwith to 0.5kB/second. I’ve pasted the documentation that skype [...]

Answer Question   |  April 8, 2005  9:56 AM
Administration, Cisco, Firewalls, Forensics, Incident response, Installation, Intrusion management, Network protocols, Network security, VPN, Wireless
asked by:
0 pts.

Cisco PIX VPN Bridging – Am I missing something??
Hi, I’m tryin to set up a VPN between two internal sites on the same subnet. I have 2 PIX 506E’s linked together (physically) in my test lab (on outside interfaces). All the configuration examples I’ve seen of setting up a VPN is between 2 different logical networks. However, I want them to act as [...]

Answer Question   |  April 9, 2005  7:21 AM
Administration, Architecture/Design, Cisco, Features/Functionality, Firewalls, Forensics, Incident response, Installation, Intrusion management, Management, Network security, Security, Service and support, Vendors, VPN, Wireless
asked by:
0 pts.

asked by:
0 pts.

SNORT RULES
I am trying to define a snort rule that will detect the word “spam” in the subject field of an email. So far I have tried alert tcp any any -> any 25 (content:”Spam” nocase; msg:”Email traffic logged!”;) But this is not filtering out only the emails that I want. ANy help would be much [...]

Answer Question   |  April 5, 2005  9:32 AM
Intrusion management
asked by:
0 pts.

How to BVlock port on Pix 506 Firewall
I am new to networking. I want to know how can i block the port in the network through firewall & proxy. Anybody can provide me some documenation on PIX Firewall & its basics.Pl. send some inportant site address to expand my knowledge. Bye Pramod

Answer Question   |  April 4, 2005  6:17 AM
Firewalls, Forensics, Incident response, Intrusion management, Network security, Networking, Routers, VPN, Wireless
asked by:
0 pts.

Use of TFTP
Why is the use of TFTP discouraged on the network from a security perspective?

Answer Question   |  April 4, 2005  7:13 AM
Firewalls, Forensics, Incident response, Intrusion management, Managed security services, Network security, VPN, Wireless
asked by:
0 pts.

trojan horse downloader
hi i have a win NT4.0 sp6 server.its a DNS and web server. from few days the IE was redirecting the sites to some search engines.when i scaned with AVG it detected some trojan horse downloader.i healed the trojan and restarted the DNS.the problem was solved.but after some hours the problem arise again.since then i [...]

Answer Question   |  November 2, 2011  3:57 AM
backdoors, Backup & recovery, configuration, Current threats, DataCenter, Hacking, Hardware, Help Desk, human factors, Installing/upgrading operating systems, Intrusion management, patching, PEN testing, Platform Security, Security, Server management, Servers, Spyware, Tech support, Trojans, Viruses, Vulnerability Assessment & Audit, vulnerability management, Windows, Windows on Intel, Windows Server 2003, worms
asked by:
0 pts.

Help required in configuring ISA server 2000 firewall
Hi all, I have some queries related to Microsoft ISA server 2000. First of all I want to provide some info about my network. In my network most of the systems are using different flavor of MS windows and one computer (call it server1) is providing internet access to all the other computers (clients). There [...]

Answer Question   |  March 28, 2005  4:34 AM
CIO, DataCenter, Firewalls, Forensics, Incident response, Intrusion management, Microsoft Internet Information Server, Network security, Networking, Networking Products, Servers, Tech support, Vendors, VPN, Windows, Windows 2000 Server, Wireless
asked by:
0 pts.

Cisco ACS, PIX and VPN problem
I am trying to configure Cisco PIX to accept vpdn connections that will be authenticated by the Cisco ACS after looking up username and profile details in Active Directory. I am seeing failed attempts on the ACS – so I think the config is ok (below) access-list acl_in permit ip 10.xxx.xxx.0 255.255.255.0 10.xxx.xxx.0 255.255.255.0 access-list [...]

Answer Question   |  March 10, 2005  3:41 AM
DHCP, DNS, Firewalls, Forensics, Incident response, Intrusion management, Network security, Networking, Networking Equipment, Networking services, VPN, Wireless
asked by:
0 pts.

How to do a Linux DMZ Intranet with Windows authentication?
I am designing a new network that has a DMZ containing Linux webservers and behind a firewall separating the DMZ a Windows backoffice . I want to run our company Intranet on the DMZ side using Linux but I want to limit access to employees both from the Internet and behind the firewall using windows [...]

Answer Question   |  March 23, 2005  11:58 AM
Biometrics, Digital certificates, Firewalls, Forensics, Identity & Access Management, Incident response, Intrusion management, Linux, Microsoft Windows, Network security, provisioning, Security tokens, Single sign-on, VPN, Wireless
asked by:
0 pts.

Blocking P2P in SBS2003 network with no ISA Server
Hi All, I manage a small SBS2003 network, which doesn’t have ISA server – i.e. the SBS box and all clients are wired via a switch to the ADSL router (Netgear DG384G). One of the users has been downloading MP3′s from a P2P network and I want to block this sort of activity. Can I [...]

Answer Question   |  March 10, 2005  4:00 AM
Firewalls, Forensics, Incident response, Intrusion management, Network security, Networking, Security, VPN, Wireless
asked by:
0 pts.

Security Forensics with Niksun or CA or Sandstorm
Does any have experience recording and tracking traffic with playback using any of these venders. I am looking for the best solution to provide Forensics on my network. Niksun or CA or Sandstorm Also on a side not I am lookign for a product to do secure email delivery. Please let me know if anyone [...]

Answer Question   |  March 27, 2005  9:28 AM
Application security, Bandwidth, Database, Encryption, Exchange, IDS/IPS management, Instant Messaging, Intrusion management, IT architecture, Network monitoring, Networking, Secure Coding, Security, Security management, Vulnerability Assessment & Audit
asked by:
0 pts.

asked by:
0 pts.

asked by:
0 pts.

asked by:
10 pts.