Network Security

I need to be able to monitor a device behind a firewall, what I normally do is create a 1:1 using a private IP on the outside to the private IP on the inside, and our monitor can do its thing. However, this does not work when the device needs interne...

Hello guysI am new in networking. All my knowledge is based on books and no real life experience.At my job I am required to set up the network and configure all apparatus I never workedbefore with. So I need help. Any kind of help will be appreciated...

The situation is the following:IPS device - IPS4260  7.0(6)E4ARC device - 6500 IOS 12.2(33)SXI56500 has 2 Internet connections -  vlan2 and vlan11  are according L3 interfaces.IPS works in promiscious mode, traffic captured using VACL capture  on vla...

Hej Everyone!I configured an ASA 5505 a couple of weeks ago. Every thing is working properly except it sends irritating messages to the syslog server. Her is an example of the message:      %ASA-2-106001: Inbound TCP connection denied from 195.215.22...

Hi, We are getting quite a lot of these alerts and I can't find any info. on the internet.  Can anyone shed any light on it..  There are hundreds of these alerts and most of the time the IP adresses are different.  As far as I can see most of the tim...

Hello all,I am trying to configure Zone Based Firewall (IOS 15.2T) on Cisco 881 router for IPv6. Current setup is simple:Zone:LAN --> WANzone security LANzone security WAN!class-map type inspect match-any Internet-cmapmatch protocol dnsmatch protocol...

Hi Forumers'is anyone can explain what this log message mean?[ Scanning] drop rate-2 exceeded. Current burst rate is 1 per second, max configured rate is 8; Current average rate is 16 per second, max configured rate is 4; Cumulative total count is 58...

Hello,I'm working on a WCCP issue with TAC and the TAC engineer told me that WCCP redirect only works if the redirected traffic (the permit ACL), the web-cache server, and the redirect interface are all on the same subnet.  After looking into this it...

I have an ASA 5510 with an IPSEC VPN configuration. Clients are using the built-in Windows VPN client rather than the Cisco VPN client. There is a single LAN connection from the 5510 to our 6510 core switch. On the core switch are multiple subnets in...

I will be installing a new ASA 5510 firewall on our SIP vlan to separate our voice traffic from the rest of the traffic.  I'm trying to decide whether or not I should go with an active/active setup or an active/standby.  Any insight on the best way t...

Hello, I have a 3845 router (12.4(13r)T10) with ZBF. On my LAN there is a user who need to access a remote IPSEC VPN server. He is able to get the tunnel but afterwards he cannot connect to any service in the remote LAN. As I'm using zbf I think that...

Hi All,I recently inherited a Cisco 2911, that appears to have had Firewall rules imported into Externally Defined Rules. ACL's are currently allowing/disallowing traffic. However, there are no firewall rules configured. To meet compliance we need to...

Hello,I wanted to rate-limit download traffic passing through my ASA5520, Software Version 8.2(1). I used configuration based on the offical documentation.I tried two configurations, one at a time: "inbound based" where I limit the traffic entering m...