Network Security

My DNS is giving me plenty of errors such as:4Jul 21 201218:57:45172.21.20.25839066.49.220.9553Deny udp src dmz:172.21.20.2/58390 dst outside:66.49.220.95/53 by access-group "dmz_access_in" [0x0, 0x0]4Jul 21 201218:59:23172.21.20.25956767.55.0.1153De...

Hi,I am getting a lot of alerts on this signature; and I would like to know if there is anything I need to do on my side to resolve it. Attacker IP is the DNS server and Victim is one of the servers.event_id = 1341305878892548268severity = informatio...

Hi allI have set up a zone-based policy firewall with HA on two 2911 routers as per the Cisco security configuration guide, for an active/passive LAN-LAN cluster.All works as expected, but there is one problem I find:when the control link between the...

Hello,I have cisco security manager, enterprise edition, version 3.3.1 Service pack 4I have bought version CSM 4.2 and would like to upgrade it.  Has anyone did this before?  regards,Kevin

I have bought an RV180 Firewall/VPN and try to use the Backup Software Crashplan. As per the supplier it needs Port 443 and 4242 open. Port 443 is fine and allows me to use the service to backup to the Cloud. However when I want to allow other users ...

Hi guys, If I configure on my router some sub-interfaces (let's say G0/0.2, g0/0.3, etc) and they belong to my inside network where should I apply the zone-member secury inside command? On the G0/0 or on each sub-interface that I have traffic to prot...

I'm using ACS V.4.2 and I tried to change profile from default to another that created under Network Access Profiles navigation bar. Anyone can explain step-by-step to assign the user to NAP. More information please see the picture.

Hi everyone!The problem is:I have a Cisco ACS 4.1 installed on Windows Server 2000.There are several Cisco devices authenticating by this ACS.Few days ago Cisco devices had started failing the authentication.All Cisco devices are configured 100% corr...

does anyone have experience with replacing the failed primary unit in an asa 5520 clusster? My standby unit has kicked in and i received my replacement for the primary from cisco. I want to know what the best practice is for getting it back into th...

Just did Java update 7 and ASDM 6.4(7) quit working. I had to revert to a version 6 Java

Hi,We have an ASA 5520 which is in multiple context mode. We are trying to pass traffic from the outside interface to the dmz interface.I may be fundamentally wrong in the way i'm configuring this, but this is one ting im hoping someone may be able t...

Hi Team,Is there any option available in any of the Cisco ASA55xx series model to install both csc-ssm and aip-ssm ips modules ? If, so is it advisable to install both ?Is the throughput of ips module has any dependency with the asa chassis throughpu...