Network Security

Hello, here is what I want to do. We have ASA 5520. and NATed two internal IPs to  two public IPs through the outside interface. i.e: 192.168.1.10 -> 101.100.100.10, 192.168.1.20 -> 101.100.101.20right now the two public addresses cannot talk to each...

how to configure ips in 5545-x firewall

model:ASA5525-Xversion:asa915-smp-k8.binASDM:asdm-731-101 

Hi, I have a DMZ network setup on ASA5525. The windows servers in the DMZ are accessible from outside from salesforce.com ip addresses only and from our internal LAN from the inside. These servers need to connect to the SQL servers on the internal LA...

Hi folks, Great to be here! Just installed IPS version 7.1; the environment is a financial institution servicing connection from third party and in-house user. I need to implement several custom signatures; prominent among these include sig to stop c...

Hello,We have an ASA 5510 with the SSM-10 module installed. ASA is running version 8.2 and IPS is version 7.1. We have put the module into inline mode in order for it to actively deny traffic, but we see policies that are firing without being acted u...

Hi, cisco configure like 1300 signatures enabled by default in the signature packages for the appliances 42xx, if I want to enable more than the default configured by cisco, how many more I can enable without affecting the performance of the applianc...

I am trying to configure the software based classic IPS module on the ASA to auto update the signature file. Something I do not understand is how to allow this. The IPS interfaces essentially have an IP address that is shared with the mgmt. subnet/vl...

Hi all, I my trying to do a telnet but Im always getting timeout. when I check in the pix 515 i see this :TCP inside 10.100.1.30:55139 inside 142.100.64.11:23, idle 0:00:01, bytes 0, flags SaAB And I have the same issue with http. Ping works with no ...

Hi,I have this snmp version 3 configuration on the ASA 5505 running code 8.2(5)51: snmp-server enablesnmp-server group test_user v3 privsnmp-server user test_user test_user v3 auth sha pass1234 priv aes 256 pass1234snmp-server host inside 192.168.1.1...

Dear All, We have a setup the IPS 4510 working inline mode with strict inspection turn on. we have detected some latency issue accessing the internal website. So we did some capture at the IPS interface. We found that there's a lot of out-of-order pa...

We have detected a high risk in asa5510.risk information:Port:22 TCP - ssh Script Id:  Name:Cisco IOS: Spoofed EIGRP Packet Saturation DoS Risk Score:7.8(High risk) Product:Cisco IOS Extended Interior Gateway Routing Protocol (EIGRP), as implemented ...