Network Security

Hi all,please give me an understanding about the ips packet flow inspection.I got a problem with IPS, it seems like a Bottleneck issue.When i turning on the IPS machine, all process being down.But when i turning off the IPS, all process begin normal ...

asa guru,I Have Cisco 5540 with AIP-SSM-40, recently i config AIP-SSM-40 to capture all traffic from all interface any to any with promiscous mode and if card fail traffic still flow throuh asa, but after that i can't login to cisco ASDM, the error i...

Hi,Hope someone can help me.I recently ordered an ASA5512-X without IDS and want to take advantage of the 60 day trial licence to see whether to buy 5512-X instead of 5510s in the future.  I have applied for, and received, trial licences from Cisco a...

Hi Please someone help me to configure the Firewall ASA 5510 in context based configuration in HA Mode with two different subnet....IP Details are below.....:interface Ethernet0/0 nameif outside security-level 0 ip address 10.10.10.2 255.255.255.0 st...

Hi,I noticed our active ASA failed over to the standby ASA in the early hours of the night, can I find out why somehow?Thanks

Hi all,I've have one topic to discuss.We have a ASA 5510 with a public /27 Network outside. Inside we have multipe Custumers, which need public Adresse to operate their own network.I have only that /27 Network. Is it possible to give our custumers IP...

Hi everyone, hopefully someone will help me out here as it's been two days and still no biscuit with trying to get my internal network talking to the world Background stuff:=============================================================================...

Hi,I am having a few issues since changing from a cbac firewall to a zone based firewall running on a Cisco 877w IOS: c870-advipservicesk9-mz.124-24.T6.bin1. Enabling http layer 7 inspection stops certain websites and downloads working. As a work aro...

When do you know it is time to upgrade to a new firewall?  From the Cisco Podcast #7 "Monitoring Firewall Performance", the speakers said when the CPU usage consistently is at 50% or higher, that is the time to upgrade.  They gave their reasons which...

                   We are using Cisco ASA 5580 (8.2) firewall. When i try to ping from inside lan to firewall DMZ interface IP it is not pingable and but from inside users i am able to ping firewall inside interface IP address.I think we can't ping t...

Hi,Was wondering if anyone has managed to get an SSM-10 module to talk to a Check Point Evetnia (or similair) event correlation server? I understand that it won't syslog, but should it not be possible to correlate events using SDEE? We have a multi-v...

Hello,I've just installed our AIP-10 IPS module into a 5510, and the Global Correlation isn't updating.I've open UDP/53 to an external DNS server and TCP/443 to 204.15.82.17               Updates:   Status Of Last Update Attempt = Failed   Time Since...