Network Security

i am deploying NAC as layer 3 OOB Real IP Gateway using ACL. i have a problem that Agent doesn't try to communicate with CAS untrusted interfacei enabled logging on the Switch and i found that NAC agent sends udp requests to its default gw (interface...

Hi All,Currently MTU size on the outside interface is 1500.If i change it to  1450  does it have any impact.we have site to site ipsec vpn.Between router and firewall we have bluecoat packet shaper. on that packet we have allocated 2mbps bandwidth be...

hii have by mistake issued the remove all from rommon & not my ips has no image.My question is, i have another IPS that i wish to copy the image from. I cannot work out how to do this?I dont think copy flash tftp works. The IPS is a 4240, i do have a...

What's the best way to bypass inspection of traffic to port 443 in IPS configuration? I don't want to use Event Action Filter because that will actually still use the inspection engine and match signatures and just exclude actions. I need inpsection ...

Hi,Hopeing someone can point me in the right direction, I have a ASA 5505 which is connected to a remote site which also has a ASA 5505 over a L2L VPN tunel. One of the sites has a WAN failover configured with two ISP which is working successfully. B...

Hello everyone,There's a lot of public and simple tool to flood attack a host with TCP, UDP packet. These tools can send TCP/UDP packet very fast and quickly bring down weak network devices & servers.We are going to public a website and i'm worry abo...

I have installed a CA signed certificate onto an ASA with ASDMthe exact and full procedure is documented herehttp://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a00809fcf91.shtmlthe problem is that I need to do this via CSM ...

Does anyone know who to convert config form a Juniper Netscreen Firewall to a ASA? We are trying to get rid of the netscreen firewalls at our location and replace them with ASA's. I know very little about Juniper Netscreen Firewalls.

Hello,I want to change my internal ip of my pix 515 firewall - i want to change it from 192.168.1.250 to 192.168.100.250 - does anyone know what simple command i would need?I am vlanning my network so want to put my pix into vlan 100.thank you

Hi,I configured one ASA 5510 firewall with CSC-SSM-10 in one of my customer location.Here i want configure my firewall to send email alerts to particular mail ID, if anybody any access my network from outside( Like VPN users).Please how to configure ...

I would like to "fine tune"  category ios_ips advanced  (or basic) on IOS IPS.Clearly ISR G2 is not able to support as many active/enabled signatures as we'd like to so it would be nice to choose ones we actualy need.Does anyone have table with signa...

I am support one client for,  whom falls under Security  scans mandatory for new implementation of ASA 5520 device .  The client uses Nessus Scan and  the test results are attachedThe Nessus scanner hit on 1 Medium vulnerabilities, Could you pls rev...