Network Security

Hi everyone, hopefully someone will help me out here as it's been two days and still no biscuit with trying to get my internal network talking to the world Background stuff:=============================================================================...

Hi,I am having a few issues since changing from a cbac firewall to a zone based firewall running on a Cisco 877w IOS: c870-advipservicesk9-mz.124-24.T6.bin1. Enabling http layer 7 inspection stops certain websites and downloads working. As a work aro...

When do you know it is time to upgrade to a new firewall?  From the Cisco Podcast #7 "Monitoring Firewall Performance", the speakers said when the CPU usage consistently is at 50% or higher, that is the time to upgrade.  They gave their reasons which...

                   We are using Cisco ASA 5580 (8.2) firewall. When i try to ping from inside lan to firewall DMZ interface IP it is not pingable and but from inside users i am able to ping firewall inside interface IP address.I think we can't ping t...

Hi,Was wondering if anyone has managed to get an SSM-10 module to talk to a Check Point Evetnia (or similair) event correlation server? I understand that it won't syslog, but should it not be possible to correlate events using SDEE? We have a multi-v...

Hello,I've just installed our AIP-10 IPS module into a 5510, and the Global Correlation isn't updating.I've open UDP/53 to an external DNS server and TCP/443 to 204.15.82.17               Updates:   Status Of Last Update Attempt = Failed   Time Since...

I have been struggeling with getting our Juniper IC4500 NAC send VLAN assignments to my Cisco Switches for some time now.Last night I managed to get the switch to accept VLAN tags for ports with a Cisco Iphone on it and assign it the proper VLAN tag....

I am having issues getting this to work.  For email, I have mail.xxx.xxx DNS'd to 165.165.165.165.  I want it to come in to 10.1.0.31.  It needs to go out a cluster of 10.1.0.31, 10.1.0.34, or 10.101.201.31 but look like it came from the 165.165.165....

ASA is 5540 w/8.3. I have a large inside block of inside address I want to NAT or PATto outside addresses.  Is it possible to use a block of outside addresses with NAT withrollover PAT to the whole range, or is it restricted to roll over to only a si...

Is it possible to make Ironport S370 as the URL filtering server of ASA. I currently see only Websense and SmartFilter as the default option. Is this possible with just these two devices ( without using a third server for WCCP) ?Currently intranet us...

hi ,yesterday I installed  a ISE in VM server with ESX4.1,I can login the ise with the user I build it in CLI ,but I can't login it with IEor FIREFOX user the same user,why?

This is with a ASA5020 (8.1(5)) This is the nat I have today:global (outside) 1 66.xx.xx.135 netmask 255.255.255.192static (inside,outside) 66.xx.xx.153 10.21.31.67 netmask 255.255.255.255This works great .67 is a smtp server that only SENDS email ou...