Network Security

Hi all,Hopefully you can help me out...  I can't decide if we've got a firewall that was exploited (possible given the old-ish code) or a host that's been compromised.The story is this --- All of a sudden the PIX cpu load spiked to 98+%.  Pings were ...

HelloWhen installing a customer IPS sensor in the ASA, you need a valid CCO id configured to download updates for the sensor. Normally I use my own, but would like to associate different CCO id's with the customer account. How would I do this? Would ...

Hello! I’m sorry for my English. I have a problem with generating license for AIP-SSM. My contract with SMARTnet service is activated, but I don’t have a PAK-number. How I can generate a license for updating my module?

I have a small number of IDS's that fail discovery. The fail description is:"Fail to discover policy for signatureDefinition component. Detail: Error encountered while generatingpolicy IpsSignaturefor instance sig0."I have scaled down the polices to ...

So - I am new to IDS but not so new to everything else Cisco.  We replaced our edge network with New ASA 5520 and also ordered the IDS/IPS AIP-SSM-40 Module.  Got it installed and it is looking at packets.  I decided to go with promiscuous as the doc...

Hi GuysPlease can some one post for me how the physical connectivity of the IPS (inline mode) could be in order  to protect the server farmthanks

I have two pix 515-e which are in failover.now the staus for failover is shown in below.it shows primary is standby and secondary is Active.If i am modifying config it gives warning the change will not be replicated to Active as change is done in sta...

Hi,,,Consultation is being planned optimization processes performed by the Active Directory including the fact is that the communication between a "single domain controller RODC Reading" and the Master are set various communications that initiate a d...

What are the chances that someone is willing to educate me on the pros & cons of configuring the TCP/IP portion of the above module on the subnet it lives in vs on it's own subnet?Thank you in advance for your time on this.

HiI just bought an SA520 to replace my existing FW. The thing is that I have private IP adresses on my LAN, and I have been issued a public IP network for my DMZ by my ISP. Meaning I want to NAT my LAN but not my DMZ, but I can't seem to find a way i...

Hi allI have a cisco asa 5505 firewall, and I have a normal home ADSL broadband router, the router currently connects via wireless to my pc.What I would like to do is basically connect the asa to my pc, then my router to my firewall.what the best thi...

Hi All,I need to set up site to site tunnel as my  lan range is geeting conflict with far end.we usually do nonat while configuring vpn.Now i need to nat the lan assume my lan ip -10.10.x.x.Public ip -----202.x.x.x.can anyone send me the docuemts