Network Security

Hi,We are using Netflow on our ASA and our internet pipe inbound is at it's maximum and in Netflow I can see the external IP of the site and the destination IP is the outside IP of our firewall, how can I see what our ASA is PATing this address to in...

Narayana,show ip access-lists iptrafficReflexive IP access list iptraffic     permit tcp host 72.5.37.36 eq 443 host 128.59.238.108 eq 4270 (1 match) (time left 299)thanksJosephWe have access lists set up for a remote site. The acls are applied to th...

Hello.We are using FWSM with software version 4.1(6) with failover and multi contexts.We need to generate and send mail notifications when failover occurs.With this configuration we are receiving syslog only!fw-csc/1/fw-csc1/act# sh run logglogging e...

Just wanted to verify that this is how to accomplish port triggering under IOS:https://supportforums.cisco.com/thread/32968Also, if wanting to trigger multiple ports just adding another line to the ACL is sufficient, or specifying "range" whether it'...

I've got smart call-home setup to email me various info but the config always has '-<IP removed>' for any IP address.Any way to get call-home to send an unaltered config?Thanks for the time.

Dear,Please find the attached topology,Can I make the VPN tunnel between site B (ASA) outside interface & site A (Router IOS) LAN interface?because i received the dynamic IP on my site A (Router) WAN interface from ISP but I have public IP configured...

I have a need to use another class C subnet for outbound NAT purposes, but this new range isn't bound to the outside interface. Is this possible?Outside interface IP: 1.1.1.1/24Inside interfac ip: 10.1.1.x/24New block: 192.168.1.0/24New inside hosts ...

I have outbound HTTP authentication enabled and working on the ASA.  I recently wanted to add DAP for VPN and set the DfltAccessPolicy to terminate.  I have four DAPs that work as they should for VPN access.  Upon setting DfltAccessPolicy to terminat...

Hello,I have a problem with one of our Cisco IDSM-2's and wondered if anyone on this forum can help me.We have the IDSM installed in a C6509 in promiscuous mode and are sending all the necessary vLAN's to the device via a vLAN access map.The device i...

Hi,While enabling Global correlation, I understood that we need to configure proxy or DNS. Also, I hope that needs to open the port (80/443) on the firewall for the management IP address of IPSto reach the cisco sensor database. If i'm correct what a...

Hello i have configured my IPS device anomaly detection policy for learning accept mode for 48 hours. and after finishing learning i see knowledge base file which is only 88 bytes in size. Is this normal ?  

I had configured an AIP-SSM-20 and was able to accesss the web interface and get it setup, and needed to change the IP on it to put it in the correct network once it was installed onsite, now I can no longer access the web portal, nor SSH to it. I en...