Network Security

how to configure ips in 5545-x firewall

model:ASA5525-Xversion:asa915-smp-k8.binASDM:asdm-731-101 

Hi, I have a DMZ network setup on ASA5525. The windows servers in the DMZ are accessible from outside from salesforce.com ip addresses only and from our internal LAN from the inside. These servers need to connect to the SQL servers on the internal LA...

Hi folks, Great to be here! Just installed IPS version 7.1; the environment is a financial institution servicing connection from third party and in-house user. I need to implement several custom signatures; prominent among these include sig to stop c...

Hello,We have an ASA 5510 with the SSM-10 module installed. ASA is running version 8.2 and IPS is version 7.1. We have put the module into inline mode in order for it to actively deny traffic, but we see policies that are firing without being acted u...

Hi, cisco configure like 1300 signatures enabled by default in the signature packages for the appliances 42xx, if I want to enable more than the default configured by cisco, how many more I can enable without affecting the performance of the applianc...

I am trying to configure the software based classic IPS module on the ASA to auto update the signature file. Something I do not understand is how to allow this. The IPS interfaces essentially have an IP address that is shared with the mgmt. subnet/vl...

Hi all, I my trying to do a telnet but Im always getting timeout. when I check in the pix 515 i see this :TCP inside 10.100.1.30:55139 inside 142.100.64.11:23, idle 0:00:01, bytes 0, flags SaAB And I have the same issue with http. Ping works with no ...

Hi,I have this snmp version 3 configuration on the ASA 5505 running code 8.2(5)51: snmp-server enablesnmp-server group test_user v3 privsnmp-server user test_user test_user v3 auth sha pass1234 priv aes 256 pass1234snmp-server host inside 192.168.1.1...

Dear All, We have a setup the IPS 4510 working inline mode with strict inspection turn on. we have detected some latency issue accessing the internal website. So we did some capture at the IPS interface. We found that there's a lot of out-of-order pa...

We have detected a high risk in asa5510.risk information:Port:22 TCP - ssh Script Id:  Name:Cisco IOS: Spoofed EIGRP Packet Saturation DoS Risk Score:7.8(High risk) Product:Cisco IOS Extended Interior Gateway Routing Protocol (EIGRP), as implemented ...

Hello I have a big problem with ASA routing,I have two locations with a ASA5515 Cluster Vers 8.2 at one side and a ASA 5525 Cluster Vers 9.2 at the other side. Both sides are connected with a server DMZ zone. At the server I have entered a static rou...

Hi,      I am struggling to find a solution to do the following:  Permanently block an ip after X amount of login failures?  I know it sounds simple, but, maybe someone can give me an example.  I don't want to block a range of ip's, just a specific o...