Network Security

HelloWhen can i find command reference for IPS appliance ?i've found this link:http://www.cisco.com/en/US/docs/security/ips/7.0/command/reference/cmdref.htmlbut these are only system commands. I need all commans including signature/engine configurati...

I'm looking to use 2x 2901 Routers as firewalls on my network.Will this work? Will the configurations stay in sync? If not how do other people manage this?Or should I just buy  2x ASA 5510 and build active/standby

Hi All,Have anyone deploy HA on IOS firewall with Fastethernet interface configured into multiple sub-interfaces and tag with different vlan-Id and is assign as inside interfaces. Serial interface is outside interface. Would like to know whether HA c...

Hi, Dual NAT is configured on ASA. The configuration is as follows:- ====================== nat (outside) 4 access-list OUT-TO-SVR outside ! global (inside) 4 172.30.30.1 ! access-list OUT-TO-SVR extended permit ip any host 192.168.10.1 ! static (ins...

Is there any way to log clock changes on PIX/ASA. In IOS there is message%SYS-6-CLOCKUPDATE: System clock has been updated fromBut i cant find that on PIX/ASAI know that i can log when user chage clock via comman prompt(logging commands) but i would ...

The VPN is up and running between Site C and Site A. No problem there.I can ping 10.2.24.1 from Site A P2P Router. But I cannot ping from Site B P2P Router. The ping times out.I have the following routes on 3 routers,Site A P2P Router: ip route 10.2....

We are running "ip inspect" on a 3941 router with IOS version15.2(1)T1. We enabled inspection for H.323 :ip inspect name iosfw h323ip inspect name iosfw h323-nxgip inspect name iosfw h323-annexeWe are using the default TCP idle-timeout3945-Router#sh ...

Hi allCan anybody help to solve the following problem;When I want to remove an object-group via CSM I have to create an activity --- policy object manager--- network/hosts-- object xxx  --> delete . When I want to deploy CSM says there is nothing to ...

Hi,We are trying to telnet port 25 (smtp) to remote Exchnage server which is outside of the firewall from a PC behind a firewall.Firewall rules are allowed from inside to outside (outbound traffic) for all the ports. We tried removing inspection of e...

I do not have a computer with a COM Port so that i amy use the console cable is there another way i can get started to configure it for use .Its a new router never been configured before.

Hi Experts,Need  a solution regarding broadcast. There were lot of packet loss when i tired to ping inside interface of firewall.And my entire network was down.When i checked in asdm there was DOS attack from particular ip  on of internal server .Tod...

Hello,I would like to ask if this is a known issue and if there is a remedy:When issuing a "sh local-host <ip-address>" I often get an increasing count of connections for this address, whereas a "sh conn local <ip-address>" and a snmp query with .1.3...