Network Security

Hi,I am having a few issues since changing from a cbac firewall to a zone based firewall running on a Cisco 877w IOS: c870-advipservicesk9-mz.124-24.T6.bin1. Enabling http layer 7 inspection stops certain websites and downloads working. As a work aro...

When do you know it is time to upgrade to a new firewall?  From the Cisco Podcast #7 "Monitoring Firewall Performance", the speakers said when the CPU usage consistently is at 50% or higher, that is the time to upgrade.  They gave their reasons which...

                   We are using Cisco ASA 5580 (8.2) firewall. When i try to ping from inside lan to firewall DMZ interface IP it is not pingable and but from inside users i am able to ping firewall inside interface IP address.I think we can't ping t...

Hi,Was wondering if anyone has managed to get an SSM-10 module to talk to a Check Point Evetnia (or similair) event correlation server? I understand that it won't syslog, but should it not be possible to correlate events using SDEE? We have a multi-v...

Hello,I've just installed our AIP-10 IPS module into a 5510, and the Global Correlation isn't updating.I've open UDP/53 to an external DNS server and TCP/443 to 204.15.82.17               Updates:   Status Of Last Update Attempt = Failed   Time Since...

I have been struggeling with getting our Juniper IC4500 NAC send VLAN assignments to my Cisco Switches for some time now.Last night I managed to get the switch to accept VLAN tags for ports with a Cisco Iphone on it and assign it the proper VLAN tag....

I am having issues getting this to work.  For email, I have mail.xxx.xxx DNS'd to 165.165.165.165.  I want it to come in to 10.1.0.31.  It needs to go out a cluster of 10.1.0.31, 10.1.0.34, or 10.101.201.31 but look like it came from the 165.165.165....

ASA is 5540 w/8.3. I have a large inside block of inside address I want to NAT or PATto outside addresses.  Is it possible to use a block of outside addresses with NAT withrollover PAT to the whole range, or is it restricted to roll over to only a si...

Is it possible to make Ironport S370 as the URL filtering server of ASA. I currently see only Websense and SmartFilter as the default option. Is this possible with just these two devices ( without using a third server for WCCP) ?Currently intranet us...

hi ,yesterday I installed  a ISE in VM server with ESX4.1,I can login the ise with the user I build it in CLI ,but I can't login it with IEor FIREFOX user the same user,why?

This is with a ASA5020 (8.1(5)) This is the nat I have today:global (outside) 1 66.xx.xx.135 netmask 255.255.255.192static (inside,outside) 66.xx.xx.153 10.21.31.67 netmask 255.255.255.255This works great .67 is a smtp server that only SENDS email ou...

Hi,I have configured the two FW for HA mode, and I am checking " sh Failover " I am unable to understand why it’s showing only two interface in monitoring.  It should show all 4 interface in monitoring. I have highlighted in below configuration. I am...