Network Security

Hi, where can I verify the nature of botnet malware-sites informations ?I'd like to detail the output of "show dynamic report top malware-sites" and I'm looking for a site where I can insert the IP (i.e. 209.53.113.221) and obtain detail, like malwar...

Dear All ,I have 2 ASA firewalls (ASA 5510 Security Plus license.) running in Active/Standby mode and I wanted to add IPS /IDS module on the existing one Which part number will be needed ?  ASA-SSM-AIP-10-K9 will do the job ? or security plus needed ...

We have a nme-ips-k9 module installed in a 3825 router. Is it normal to have a significant cpu usage increase (from 20% to 75%) when we activate the monitoring on one interface of the router with ids-service-module monitoring command ? The module is ...

We have a ASA up for a few years now and I am finally trying to understand some of the syslog info.  I configured it yesterday to email any Alerts and Emergency messages.  In the past 21 hrs I have received 511 (I'm glad I had conversation view enabl...

I have a one-to-one NAT configured (mail <-> xenon), however, I am unable to configure ICMP to respond on the external IP of the NAT.  Below is my config, there is extra ICMP cruft that I have been trying that is probably not necessary, but any help ...

Hi Guys,Could you tell me if I can do destination NAT (class C network => class C network) on Cisco ASA running 8.2? (or another version).For example, will destination NAT like this work:static (inside,outside) 8.2.2.0 10.10.8.0 netmask 255.255.255.0...

Hi guys,My question is connected with IPv6 routing and ASA.My simple lab network topology:PC======ASA 5520=======Router 2801I've assigned following IPv6 Subnets:PC-ASA:Network is 2001::3000:100:/104ASA has 2001::3000:101:1/104PC has 2001::3000:133:13...

Hiis it possible to password recover a 4240 from rommon, the same way you would with an ASA 5500 ??If not how do i do this?

Hello,     I have one ASA5520 with version 8.4(3), and a few ACL rules defined. One ACL is permit traffic from one interface(EXT_SERVICE) to another interface(DMZ_SERVICE), if i change that rule to deny traffic, all new connections that match the rul...

I have a subnet for guest network access, both wired and wireless.  We have a Netgear ProSafe that is trunked to a Cisco 2901 performing 'Router-on-a-Stick'.  For most internal traffic, it all stays behind the ASA.  But for guest traffic, I have a ro...

i get a syslog message  "deny tcp (no connection) from 173.46.173.5/16220 to HGREAK_GLB/443 flags RST  on interface outside" when I am trying to access a website that is on my DMZ from internal.  The browser displays "cannot display the webpage".  Pl...