Network Security

Hi,Am replacing the Pix 515E firewall with a ASA 5515 firewall. When givingthe below commands:nat-controlglobal (dmz) 1 interfacenat (inside) 1 10.1.11.0 255.255.255.0static (inside,dmz) 172.19.176.91 10.1.11.41 netmask 255.255.255.255static (inside,...

Hi,I'm looking at specs for ASA5585-X and I'm wondering whether it can run IPS, Application control, web security and botnet filtering at the same time.I tried configuring ASA5585-S20P20-K9 in the configuratior but I don't see an option to add licens...

Hello everyone-I have an ASA-5585-SSP-10 that I have subinterfaces and VLANs created on. I used this ASA to firewall the vlans downstream on our Catalyst 4k's. Most all of my interfaces have specific ACLs in for the necessary traffic and all is good....

I have a Cisco CGR 2010 router running CGR2010-UNIVERSALK9-M, Version 15.2(3)T. I have been unable to locate the SCADA signatures mentioned here: http://www.cisco.com/en/US/prod/collateral/routers/ps10967/ps10977/whitepaper_c11-696141.pdfWhen I load ...

Hello,I have purchased new Cisco 5515 firewall. I want to assign ip address on interfaces but 'ip address' command is not available under interface section...Please guide. How to enable this feature.

I keep getting the following syslog messages on my ASA5545:NAT/PAT pool exhausted. Unable to create connectionLU allocate xlate failedI read some other discussions that this may be a bug, but I want to make sure.sh memoryFree memory:        492880080...

Hi guys.This may be a very quick question as I think its not possible!But is there a way to NAT 2 differentpublic addresses to the same internal service?eg.Internal server 192.168.1.1Service port tcp/80 First NAT address 1.1.1.1Second NAT address 2.2...

Hi,I have an IPS4270 appliance (IPS4270-20-K9) in IDS mode. I am getting continuous triggers on the TCP Hijack signature and the attacker is always the proxy server. with the target of various external addresses and 1 specific internal address hostin...

I'm attempting to pass IP's from my pix501 (which is the dhcp server) to clients on the wireless lan controller. The controller acts a dhcp relay agent and I get this in my pix debug:DHCPD: DHCPDISCOVER received from client 0100.18de.19ab.b9 through ...

I am using a Cisco 2821 with IOS 12.4(22)YB8.  I have a pretty simple ZBF setup.  All TCP, UDP, and ICMP from the internal LAN is inspected to the Internet.  My problem is with my IP phone, which connects to an Asterisk Server on the Internet.  I can...

Hi ,I am having one S2S Tunnel where in Phase I below parameter.SA Lifetime:8 HrsTreaffic Volume:       45M            Can I change this parameter in our end to belowSA Lifetime:24 HrsVolume: Not considerQuery: Whether this Parameter is Remote side p...

Has anybody tested the Poison Ivy RAT against the Cisco IDS/IPS?  I have an XP workstation inside a network that is currently connected to a Pioson Ivy server listening on the default port 3460.  Doing nothing fancy...no special traffic hiding, didn'...

Hello,I am new to Cisco Site to site VPN. I have deployed new site to site VPN. Request help to understand few concepts.1). i need to understand the basic difference among Normal ACL, crypto ACL, ACL Manager.2). If i want to pass my traffic through V...