Network Security

Hi AllI want to setup my FWSM so that the outside networks can communicate with the inside networks on their real ip address and visa versa. This is not an Internet facing Firewall and only being used to filter traffic between some secure networks, a...

Hi allCan threat detection provoque frequent disconnections on allowed traffic?We are using  asa 5520 with 8.3.1 IOSFor instance in ASDM we see SYN attack messages .The source ip address correspond to external an external host (in the outside interfa...

Good Evening Everyone,Got an ACL issue on my 5510. I have set up ACL's for the Inside and Outside interface. Both ACL's are identical right now as I am trying to test an issue. When I run the packet trace command in ASDM I am able to successfully pas...

Hello,Could somebody confirm if Netflow version 9 is available on any version of the Cisco Firewall Services Module please?  We have four of these devices that are managed by a vendor and I am told the current version which is 4.0(12) doesn't support...

Hi Guys,I am new to IPS and would like to enhance the security of the Cisco 887s we have, they all have Adv IP Services with IOS 15.0 M7What is required to enable IPS, such as products or licences? (Product Codes would be helpful)What is a basic conf...

Dear All,As i'm facing the issue with Cisco CSC module installed on ASA 5510, It hangs up and doesnt work sometime, so it is bypassing all the traffic without inspection through CSC module. After restarting ASA 5510 box, it works fine as it used to w...

I remember quite some time ago hearing that spam mail on an infected internal system can use any port to send mail out.  What I would like to setup is a set of firewall rules to only allow certain packets out through their correct ports, such as DNS ...

Hello All,Gurus,out there please help me understand how do i update the SSL certificate on cisco NAC appliance (clean access mananger/clean access server).how to check when is the certificate being expired.thanks in advance.

Hi,We have a ips 4270 which reports a lot of threats with source and dest 0.0.0.0. Why is that, can't it solve these addresses? Example:Receive Time          Severity          Event Type ID          Event Name          Device          Source         ...

I am trying to export the rules into a .csv or text file for a presentation, is there a way to do this?thanks in advance

I am using a Cisco ASA 5505 for the direct internet access link at one of my sites.Is it possible to set up an email alert when a particular interface's traffic goes over a certain bandwidth?Thanks for reading.

Hi all,I'm testing the Cisco IOS Resilient ConfigurationFirst I perform a command "secure boot-config" After i want simulate a hacking action and I make some permanet changes to config-startup from telnet. Where and when i can see the mismatch messag...