Network Security

Hi,   we have IDSM configured to block (shun) for some signatures with FWSM.when sig 3002 is fired , the attacker is shun by FWSM but the issue is sig 3001 is fired and shun the victim which is internal normal user.any suggestions,

Hi all,I need help on ASA 5505 with Base License that uses 3 VLAN's.My VLAN 1 is for used for my home network.VLAN 2 is connected to the public Internet and my IP gets assigned by ISP dynamically.VLAN 3 is DMZ where I will have few VM's that would ne...

I want to configure 5585x Active/Standby with 2 nexus switches utilizing VPC technology. Is this possible? New ASA 8.4  supports etherchannel so I want to plugin 2 cables from ASA1  to sw1 and sw2 and 2 cables from ASA2 to sw1 and sw2? Is this a vali...

I have three sites and the first and second site have redundant link but the third site only has a link.The third site has two VPNs site-to-site one for the first site and one for the second site.How do the traffic that leaves of third site with dest...

Hi ,High help is needed on configuring ASASM module at CAT 6k.If some one help configuring failover for the same.Thanks,Vijay

When i am trying to configure failvoer i am getting following error stating secondary state as failed. Please let me know where i went wrongDR-INT-FW# sh failoverFailover OnFailover unit PrimaryFailover LAN Interface: FAILOVER GigabitEthernet0/2 (up)...

HI all,I have firewall to that  2 router are. connected .On firewall 4 sites to site vpn are created for paricular valn range say 192..168.30.0/24on router1  the ip is asint fa0/01-  wan linkip address 201.124.155.17int fa0/0ip address 124.x..x.5-ins...

My DNS is giving me plenty of errors such as:4Jul 21 201218:57:45172.21.20.25839066.49.220.9553Deny udp src dmz:172.21.20.2/58390 dst outside:66.49.220.95/53 by access-group "dmz_access_in" [0x0, 0x0]4Jul 21 201218:59:23172.21.20.25956767.55.0.1153De...

Hi,I am getting a lot of alerts on this signature; and I would like to know if there is anything I need to do on my side to resolve it. Attacker IP is the DNS server and Victim is one of the servers.event_id = 1341305878892548268severity = informatio...

Hi allI have set up a zone-based policy firewall with HA on two 2911 routers as per the Cisco security configuration guide, for an active/passive LAN-LAN cluster.All works as expected, but there is one problem I find:when the control link between the...

Hello,I have cisco security manager, enterprise edition, version 3.3.1 Service pack 4I have bought version CSM 4.2 and would like to upgrade it.  Has anyone did this before?  regards,Kevin

I have bought an RV180 Firewall/VPN and try to use the Backup Software Crashplan. As per the supplier it needs Port 443 and 4242 open. Port 443 is fine and allows me to use the service to backup to the Cloud. However when I want to allow other users ...

Hi guys, If I configure on my router some sub-interfaces (let's say G0/0.2, g0/0.3, etc) and they belong to my inside network where should I apply the zone-member secury inside command? On the G0/0 or on each sub-interface that I have traffic to prot...

I'm using ACS V.4.2 and I tried to change profile from default to another that created under Network Access Profiles navigation bar. Anyone can explain step-by-step to assign the user to NAP. More information please see the picture.