Network Security

The   IPS-4240-K9  [IPS Version 7.0(4) E4] is deployed in inline mode before the ASA and perimeter router .The design is  LAN->IPS->ASA->Internet Router.The problem is that when i am uploading on the internet the IPS inspection load increased to 100%...

HelloI have a vpn setup which is working on a Pix 535 firewall. I have more then 100 VPN accounts but my problem is that the vpn users are getting ip address from a common pool and i do not have control on the IP address. I want to configure the syst...

Dear allWe have a cisco firewall ASA-5510 which is configured to connect our users to one ISP. Recently we added new ISP and our company wants to connect both ISP to the network. I configured both connections but to make our user use internet we need...

      Where can i find information on the Processes/threads shown, when "show processes' command is executed on  ASA version 8.2(2)?  I'm particularly looking for information on DATAPATH-0-562 ---- DATAPATH-7-569 processes. We are seeing CPU load aro...

I need some firewalling and I need some routing.  But I only want to buy one.  So basically do I buy a Router and do firewalling on it or do I buy a Firewall and do some routing on it?

I have this issue,Two Vlans (ID 1 and 100)are on a Cat 4500, which connects to an ASA, interface DMZ. On 4500, there is default route point to the ASA DMZ interface, please see the attached files.Issue, server on vlan 100 cannot ping a server on Vlan...

I'm running an IPS and i would like to know the parameters to block a specific IP when creating/configuring a new signature. I'm trying to block youtube's IP address by signature and be able to see the alerts-logs of computers trying to access it.I k...

We had upgraded 3 of our firewalls in the last week. Those were ASA 5510s and were running on 8.2(2)16 before. They were upgraded to 8.4(4) last week. We have Wireless Access Points in the external segment (outside firewall) and after the firewall wa...

I'm working on an ASA that currently sits behind another device that the ISP equipment terminates on.  The device has the real external addresses for the network (A.B.C.100) and it has a private range of 10.0.0.100 for the internal network.  The ASA ...

http://www.cisco.com/en/US/docs/security/asa/asa82/system/message/logmsgs.html#wp4770603So, according to the above link, if in message ID 302013 or 302015 you see the keyword "outbound" it means that the addresses are flipped in the SYSLOG message. I...

HiHvaing problem on my Apps team keep on complaint their remote SSH session keep on timeout. Just wondering anything i can do in order to extend their SSH remote session to their Oracle application server 10g. thanksNoel

HiCan someone tell me what is the OID value I should look for to get the infomation given by show traffic command in Cisco ASA.

Hello Gus,We have many clients who are misusing our company bandwidth by downloading files through BitTorrent and Download-Managers. i tried alot to block it but no luck.Can anyone intruct me on how to block them on ASA device ?