Network Security

So - I am new to IDS but not so new to everything else Cisco.  We replaced our edge network with New ASA 5520 and also ordered the IDS/IPS AIP-SSM-40 Module.  Got it installed and it is looking at packets.  I decided to go with promiscuous as the doc...

Hi GuysPlease can some one post for me how the physical connectivity of the IPS (inline mode) could be in order  to protect the server farmthanks

I have two pix 515-e which are in failover.now the staus for failover is shown in below.it shows primary is standby and secondary is Active.If i am modifying config it gives warning the change will not be replicated to Active as change is done in sta...

Hi,,,Consultation is being planned optimization processes performed by the Active Directory including the fact is that the communication between a "single domain controller RODC Reading" and the Master are set various communications that initiate a d...

What are the chances that someone is willing to educate me on the pros & cons of configuring the TCP/IP portion of the above module on the subnet it lives in vs on it's own subnet?Thank you in advance for your time on this.

HiI just bought an SA520 to replace my existing FW. The thing is that I have private IP adresses on my LAN, and I have been issued a public IP network for my DMZ by my ISP. Meaning I want to NAT my LAN but not my DMZ, but I can't seem to find a way i...

Hi allI have a cisco asa 5505 firewall, and I have a normal home ADSL broadband router, the router currently connects via wireless to my pc.What I would like to do is basically connect the asa to my pc, then my router to my firewall.what the best thi...

Hi All,I need to set up site to site tunnel as my  lan range is geeting conflict with far end.we usually do nonat while configuring vpn.Now i need to nat the lan assume my lan ip -10.10.x.x.Public ip -----202.x.x.x.can anyone send me the docuemts

We have a user who needs to access a vpn from his MAC through an ASA 5505.  The user is getting an IP via DHCP and the outside interface of the ASA gets it's address via DHCP as well.  The user states that when he is home or anywhere else but behind ...

Hi everyone,I have a very "interesting" que from my customer.He is asking me how much disk space is needed for an event log. Just one event log. Because I told him that IPS itself has limited space for logs and to archive it, please use IME installed...

I've run into an interesting problem.ASA: 8.4(2)ASDM: 6.4(5)When I make a change at the CLI, syslog message ASA-5-111008 is generated and sent to the syslog servers, local buffer, and ASDM.When I make a change in ASDM, syslog message ASA-5-111008 is ...

Any idea what this means? Why are these packets being dropped?Mar  2 13:46:11.315: %FW-4-TCP_OoO_SEG: Dropping TCP Segment: seq:1826858942 1492 bytes is out-of-order; expected seq:1826829902. Reason: TCP reassembly queue overflow - session 10.2.31.31...