Network Security

This should be a simple question.Customer is thinking about the whole IDS/IPS environment.He has some 1921 routers.Am I correct is saying that If the router has the FL-SEC installed, then all they would need is to purchase the CON-SUSA-1921SEC subscr...

i am having issue after upgrade the ASA5520 from 7.2.4 to 8.2.5, the LMI remote session getting disconnect in between the session at one of the interface but working fine with another interface,i have outside and backup interface which work on intern...

I am in the process of switching firewalls. Currently I have a Sonic Firewall inplace.  I have been tasked to switch the firewall out with a cisco asa firewall 5510.  The sonic firewall currently allows email traffic, web traffic, and dns traffic.  W...

Hi there,I am attempting to set up failover dual ISP on a 5505 running 8.4(4) with the Sec Plus  license.Everything i have been able to reference so far, points to old commands not available or relevant in 8.4For instance:global (backup) 1 interfaceg...

Hi All,apologies in advance for seemingly stupid questions but I was forced to ask them as I have ALWAYS had great difficulty in using debug on Cisco platforms. Nothing ever shows up when I set up debug despite configuring "logging console" and setti...

IOS Firewall (ZBF) Limit SMTP connections from same IPHello,we are running a Postfix MTA behind a IOS Firewall (ZBF) on a CISCO1921. Sometimes we get more than 2000 smtp login attemps likepostfix/smtpd[123456]: connect from (...)(...)postfix/smtpd[12...

Hello all! I just bought a Cisco ASA5505 and I'm a bit of a newbie. I'm trying to opening a port range through CLI, but it doesn't seem to be working. Any feedback would be appreciated thanks!Background:I have an FTP Server running behind the firewa...

Hello,We have 2 subnets in differnet locations, both are connected via IPSec VPN, 192.168.1.0  and 192.168.2.0Can access 192.168.1.2 to 192.168.2.2 and vice versa but from other IP not possiblex.x.x.x indicates public ip of HOxx.xx.xx.xx indicates pu...

Hi,I have a little GNS3 scenario, i would like to ask you for helpThe problem is i cannot connect to R1 via telnet or ssh from behind ASA.I can conenct to R1 from his own network via telnet+ssh.I can open the web server behind R1 from beghind ASA.I c...

I need to move from ASA 8.4(1) to 9.0(2). Reading http://www.cisco.com/en/US/docs/security/asa/asa90/release/notes/asarn90.html#wp582431 it seems to be a quite safe upgrade cause I do not have IPv6 ACL and I have only IKE v1. The following is not ver...