Network Security

Hi,We have two AIP-SSM module installed at Cisco ASA 5540 running at Active/Standby mode. I have configured IPS in a inline mode, before hand it was in a promiscous mode. After configuring it in a inline mode, IPS triggering two signatutures always {...

I have noticed that on IPS 4240 in our environment signature like AD-External TCP scanner,IIegal UDP scanner are firing from internal hosts which are not any known scanner machine ,just simple clients .At times the victim address is 0.0.0.0 and the p...

Hi Experts,I am facing problem while a configure below command in my ASA firewall-aaa authentication match access-list01 PROD Radius-serverit throughs below error-Hybrid configurations using 'match' and 'include|exclude' are not supportedUsage: [no] ...

Dear Member,I am faceing Teardown problem on cisco asa 5505.Users are always disconnecting 25-30 min from outside server.Here is the some log details.. |22:55:32|305012|10.60.2.144|1397|x.x.x.x|49563|Teardown  dynamic   TCP translation from inside:10...

Hello All,This is my first post in the IPS section, so I am a IPS newbie.....Can anyone tell me how I can block any skype traffic and facebook traffic using my IPS SSM-10 ?CheersColin

Hi fellas! I'm a little confused. It says that for the ASA AIP SSM-20 it has ipv6 support. Yet when I look for how to do it, it says that the ASA's Modular Policy Framework does not support ipv6. Any bright ideas on this one?http://www.cisco.com/en/U...

Hi All.I've got a problem on 887VAMG router. It drops important connections. As customer wants to have a firewall I created ACL and ip inspect rules ,but the router drops their connections to cloud and some websites are not opening. So I removed ACL ...

Our external security department needs to scan, every three months, a computer behind the firewall. I need to create a simple NAT rule that will allow an ip address or subnet to the computers behind the ASA 5505. At the moment, we have a simple NAT r...

Hi to all,I'm wondering what's the maximum throughput the CSC module can handle. Does anybody have numbers / experiences?A customer is experiencing bad performance when load on the outside interface of ASA is about 10 MBit/s. I don't know how much of...

global (outside) 1 103.191.12.3-203.192.13.34global (outside) 1 103.191.12.1global (outside) 1 103.191.12.2nat (inside) 1 10.20.216.0 255.255.255.0nat (inside) 1 10.20.217.0 255.255.255.0nat (inside) 1 10.20.176.0 255.255.252.0nat (inside) 1 10.20.18...

ASDM 6.4ish and ASA 8.4(3)  The good news is after much trial and error I have got to this point.If I may advise novices on what I have learned: (1)  (DONT USE ACL manager to make acl rules - use the ACCESS RULES at the top). (otherwise you wont see ...

Hello ,I spend 3 days trying to ping or to reach anything from 192.168.14.1    to      192.168.21.1 And it’s not working, can anyone helpThanksASA Version 8.2(2)16 !hostname ASAdomain-name corp.localnamesdns-guard!interface Ethernet0/0nameif outsides...

Hi All,I have a Cisco ASA that I am trying to discover with SNMP (Solar Winds). The Solarwinds server can ping the ASA on the E1 interface (on the same network as the server), yet it cannot be discovered using SNMP, it fails every time.This is the co...