Network Security

We have a requirem,ent of adding IDS to CSM and then forward the IDS related logs to SIEM tool . Please suggest

I'm struggling to get my NAT working as I am upgrading from a PIX to an ASA running 8.4. I'm trying to duplicate the following that was taken from the PIX:PIX NAT shown here:nat (inside) 1 0.0.0.0 0.0.0.0 0 0global (outside) 1 interfaceglobal (outsid...

Hi ...  I'm trying to configure UC-Proxy using an ASA 5505 with software version 8.0.4.I was following the instructions in DOC-5704 and ASA 8.0 CLI.I don't have USB security tokens in UC solution, instead I'm using IP phones Cisco 7961 with MIC.I con...

Hi everyone,I have a slight issue with one of our ASA 5510's.I am getting flooded with "Deny IP spoof from (192.168.50.XXX) to 192.168.102.XXX on interface inside"The 192.168.50.XXX in actually the ip address of the inside interface of the ASA and th...

We have a corporate network and when any user tries to download a pdf  file from a specific site i will fail about 95% of the times.The site  is www.mineduc.cl. I've been monitoring the firewall using ASDM and  filtering mi ip address and i got the f...

What is the maximum number of ASA5520s you can configure for a firewall failover in a cluster?  The documentation mentions 10 appliances but that seems to be for VPN only. 

Hi,We have a transparent firewall (fwsm) between 2 ospf neighbors.Although the ospf neighorship is formed and the ospf neighors are placed in FULL state the neighborship is teared down after dead timer expires.It seems to me that ospf hello is not pa...

Hi,Has anyone figured out an easy way to convert custom SNORT signatures to the Cisco IDS? There seem to be a lot of parameters that don't really match in the Cisco World to the Snort world and I am wondering if this is something that people are tryi...

HiPlease send me the document regarding above config.

Hi CSC,I have a question,If ACL does not allow host to communicate, why is not the source IP be the firewall interface that deny the communication? This is detrimental as it does not reflect who is the root cause. Any way to reflect who is denying th...

Hi,Since I couldn’t find it in the internet, I hope I can find it here.What is the difference between teardown & deny in Cisco ASA syslog message?Thanks in advance

Hi All,I got a situation here for Nat-ed IPs i configured. I expected to open some ports on the interface to allow certain traffics to pass through, yet there are some of them are failed. Down is my current config.object-group service DM_INLINE_SERVI...

Hello,I have a Cisco 2811 running Advance Enterprise v 15.1-2.  I've just configured it using ccp for internet access (on 2 lines) and a firewall.  The configuration is pretty much all default and I used the ccp wizard to create a 'medium-secure' fir...