Network Security

I upgraded our IPS from 7.1(3)E4 to 7.1(4)E4. My question is how long does it normally take to reboot?

Not very familiar with ASA and NAT'ing in general so hopefully, this will make sense.I've created a Site-to-Site IPSec VPN tunnel with one of our clients (who uses a PIX).  The remote user can connect to our local, private LAN servers without a probl...

problem description: 2 ASAs with multiple contexts and failover. an important ACL entry was lost on the running configuration eventhough no failover occured (entry still available in the startup configuration). Nothing was found on the bug toolkit - ...

iffrence between DH group  and des.As from understanding DH uses two separate key to encrypt and decrypt the data.Des use single key to encrypt the dataso during phase 1 in site to site vpn we use enccryption alogrithm say des and DH group alsoso why...

Hello my name is Ivan:I have a cisco asa 5520 ios 8.2. This is my configurationasa# sh run namename 192.168.1.2 HOST-DMZname 10.24.1.8 HOST-LANasa# sh run natnat (inside) 1 10.24.1.0 255.255.255.0nat (dmz) 1 192.168.1.0 255.255.255.255.0asa# sh run g...

Hello PeepsIs there such a thing as One time Software upgrade for the ASA5520 firewall inc SSM-10 moduleCustomer doesn't have a valid support contract and would like to upgrade from asa 8.0.4 to 8.4.Does this one time software upgrade include adsm s...

HiI have a weird problem .I want to configure a zone based firewall but i have the folowing problem I have a router who performs router o a stick and a WAN connection . From the CCP GUI when i click add a zone i don`t see the interface GigabitEtherne...

I have a setup using an ASA 5510 8.2(2). In the DMZ (192.168.12.x) there is a server, switch and multiple cameras for surveillance of the site. In the Inside (140.152.25.x) are the pcs that can run the client software to view the video feed, or it ca...

Can anyone point me to a FWSM doc detailing IPV6 support? I know that V6 is only supportedin routed mode and there is no failover. Is there a roadmap or is the module being phased out?mike

Hi,We have two AIP-SSM module installed at Cisco ASA 5540 running at Active/Standby mode. I have configured IPS in a inline mode, before hand it was in a promiscous mode. After configuring it in a inline mode, IPS triggering two signatutures always {...

I have noticed that on IPS 4240 in our environment signature like AD-External TCP scanner,IIegal UDP scanner are firing from internal hosts which are not any known scanner machine ,just simple clients .At times the victim address is 0.0.0.0 and the p...

Hi Experts,I am facing problem while a configure below command in my ASA firewall-aaa authentication match access-list01 PROD Radius-serverit throughs below error-Hybrid configurations using 'match' and 'include|exclude' are not supportedUsage: [no] ...

Dear Member,I am faceing Teardown problem on cisco asa 5505.Users are always disconnecting 25-30 min from outside server.Here is the some log details.. |22:55:32|305012|10.60.2.144|1397|x.x.x.x|49563|Teardown  dynamic   TCP translation from inside:10...

Hello All,This is my first post in the IPS section, so I am a IPS newbie.....Can anyone tell me how I can block any skype traffic and facebook traffic using my IPS SSM-10 ?CheersColin