Network Security

Hi, I have IPS inline with Signature version 547.i want to update this signature and i dont want to affect the running enviroment ( since it is inline)my question is if i upgarde it, will it affect the organization ( i.e may new signature will block ...

Hello, everyone, i am writing you for help me.I Have this Topology: R1 is as server and i want to public that server in INTERNET using public IP 7.7.7.7, but i can not do that. I tried to do a NAT but it just translate from DMZ to Outside, however i ...

I know it is a stupid question.I say the answer is ten.  That means ten hosts can be behind the firewall and hit the internet.  The eleventh doesn't get to go out.I'm being told by a coworker that the "10" in the part number refers to the number of I...

Hello Experts,We have our Production Servers placed at ISP DC where we are using Cisco ASA firewall model 5505 and all the servers placed behind the firewall.The bandwidth we have 100 MBPS and there is no IPS device in between. Since long time, we ha...

I am working on locking down the ASA and I am looking for the commands to set the number of failed authentications before it won't accept login attempts from that host.  I found a single command to set the max times but what about the max duration or...

Hi All,The situation is as follows:I have an interface on the my ASA dedicated for unmanged devices that can get to the internet only.  no access to any other networks behind the ASA. These users want to use our mail server on the network but they us...

Im looking at the IPS modules at the moment that seem to have an ongoing issue of the Analysis Engine crashing. This runs as a process called sensorApp located in /usr/cids/idsroot/bin/When its originally launched it runs without problem using a -z s...

Hello Experts,We  have our Production Servers placed at ISP DC where we are using Cisco  ASA firewall model 5505 and all the servers placed behind the  firewall.The bandwidth we have 100 MBPS and there is no IPS device in  between. Since  long time, ...

Hi,I'm trying to use qos to police traffic where a certain host should not go above 5Mpbs at any time and if the traffic is exceded it should be dropped.I have trying to play around with the below but the host machine can still access the full bandwi...

I feel this is a fairly easy straight forward problem. I have a NAT translation from inside,outside and it's to translate 449 to 443, translation is working great and this is all this public IP is used for. Problem is the device on the other end need...

I've been tasked with converting a Netscreeen fw to ASA 5520. All is well except for some of the fw policy where they have used fqdn for a host in the "untrust" portion of the policy. On the netscreen, you can configure a dns server and it will go ou...

Hi all,this is something not supported by Cisco any more. I would greatly appreciate if someone could advice me on this pleasePIX is in a Cluster as a Temporary solution. After implementing a new  SNMP server, gets SNMP alarm "SNMP GET_NEXT Loop Dete...