Network Security

It used to be and I still think it is that you always have physical separation of trusted and untrusted traffic (so a common switch for outside interfaces to plug into and where your circuits could plug into if ethernet handoff etc, and a switch for ...

Hello everybody,I would like to ask if it is possible to monitor the analysisengine in IDSM-2 by SNMP. Time to time the engine stops working:idsm# iplog-status Error: getIpLogList : ct-sensorApp.651 not responding, please check system processes - The...

Hiteam could you any one help me to configure 4240 series IPS for ma network. Here I have HA for Internet router to Access switch level but right now I got only one IPS device so which is the recommended way to configure this without loosing my HA th...

Hello Guys,I have 2 IDSM-2 modules in two different 6500 switches. When I try to connect to them via session slot command I am unable to get the login prompt.1. In the first IDSM-2 it says trying 127.0.0.91 . . .Open and no username and password prom...

Hello,I'm just trying to find a product that meeting the specs I've been handed. One of the issues I'm running into is finding an IPS with 20 Gb Ethernet ports on it. Does anyone have a suggestion? TIA.

Hello,I put an SSM40 into production in our ASA last week in promiscuous mode initially to determine what the device is seeing inbound through the ASA.  So far, it isn't reporting anything which I suspect isn't correct.  This is what I have for a con...

I have a mail archiver (hardware device) in my network that I need to access to from the Ipad/iphone. There is an app for it but I have to allow the access on the ASA. I created an 'object' for the device and added a Static NAT entry for it, then add...

Hello Everyone I have a enviroment over VPN:My asa version is 8.2(2)16.                                                       VPN OVER INTERNET Costomer Network 192.168.11.0/24 <----------------------------------------------> 172.17.2.0/24 My Network...

Hi:I have to allow traffic from my DMZ into my LANI have created the following access list and will apply to DMZ interface:interface Ethernet0/1nameif insidesecurity-level 100ip address 192.168.200.1 255.255.255.0!interface Ethernet0/2nameif dmzsecur...

I've seen Cisco documentation recommendation transparent mode for firewall deployment in the data center, e.g. 5585X. I understand the key reasons for this are:- easy "insertion" of firewall in pre-existing network- speed (since there is no "hair-pin...

dear all :i am facing very urgent and critical DDOS on the port 80 on one of our webserversThe Case:•1- Too much traffic from too many different ips around the world asking the webserver on the HTTP(80)port which is opened to any one based on our req...

Hi all,Is it possible to NAT source & destination addresses (twice nat) on an ASA5520 running 7.2(5) ?