Network Security

I have a setup using an ASA 5510 8.2(2). In the DMZ (192.168.12.x) there is a server, switch and multiple cameras for surveillance of the site. In the Inside (140.152.25.x) are the pcs that can run the client software to view the video feed, or it ca...

Can anyone point me to a FWSM doc detailing IPV6 support? I know that V6 is only supportedin routed mode and there is no failover. Is there a roadmap or is the module being phased out?mike

Hi,We have two AIP-SSM module installed at Cisco ASA 5540 running at Active/Standby mode. I have configured IPS in a inline mode, before hand it was in a promiscous mode. After configuring it in a inline mode, IPS triggering two signatutures always {...

I have noticed that on IPS 4240 in our environment signature like AD-External TCP scanner,IIegal UDP scanner are firing from internal hosts which are not any known scanner machine ,just simple clients .At times the victim address is 0.0.0.0 and the p...

Hi Experts,I am facing problem while a configure below command in my ASA firewall-aaa authentication match access-list01 PROD Radius-serverit throughs below error-Hybrid configurations using 'match' and 'include|exclude' are not supportedUsage: [no] ...

Dear Member,I am faceing Teardown problem on cisco asa 5505.Users are always disconnecting 25-30 min from outside server.Here is the some log details.. |22:55:32|305012|10.60.2.144|1397|x.x.x.x|49563|Teardown  dynamic   TCP translation from inside:10...

Hello All,This is my first post in the IPS section, so I am a IPS newbie.....Can anyone tell me how I can block any skype traffic and facebook traffic using my IPS SSM-10 ?CheersColin

Hi fellas! I'm a little confused. It says that for the ASA AIP SSM-20 it has ipv6 support. Yet when I look for how to do it, it says that the ASA's Modular Policy Framework does not support ipv6. Any bright ideas on this one?http://www.cisco.com/en/U...

Hi All.I've got a problem on 887VAMG router. It drops important connections. As customer wants to have a firewall I created ACL and ip inspect rules ,but the router drops their connections to cloud and some websites are not opening. So I removed ACL ...

Our external security department needs to scan, every three months, a computer behind the firewall. I need to create a simple NAT rule that will allow an ip address or subnet to the computers behind the ASA 5505. At the moment, we have a simple NAT r...

Hi to all,I'm wondering what's the maximum throughput the CSC module can handle. Does anybody have numbers / experiences?A customer is experiencing bad performance when load on the outside interface of ASA is about 10 MBit/s. I don't know how much of...

global (outside) 1 103.191.12.3-203.192.13.34global (outside) 1 103.191.12.1global (outside) 1 103.191.12.2nat (inside) 1 10.20.216.0 255.255.255.0nat (inside) 1 10.20.217.0 255.255.255.0nat (inside) 1 10.20.176.0 255.255.252.0nat (inside) 1 10.20.18...

ASDM 6.4ish and ASA 8.4(3)  The good news is after much trial and error I have got to this point.If I may advise novices on what I have learned: (1)  (DONT USE ACL manager to make acl rules - use the ACCESS RULES at the top). (otherwise you wont see ...