Network Security

I came across an excerpt from the CCNP Security IPS Official Cert Guide at the weekend that essentially said that you can use an Etherchannel bundle as a destination port with SPAN to connect multiple sensors for a scaleable HA IDS solution. Now that...

Hi !i would like to see if this is currently possible :i have two firewalls, fwsms and/or asa .i would like to have the following configuration :fwsm/asa/other are in transparent mode [assuming that in that way they can pass Lacp]if they can pass lac...

Hi everyone,I was noticed that Cisco ASA is able to generate reports in terms of Syslog messages, NetFlow v9,but how can I schedule the appliance to create the reports on a daily/weekly/monthly basis?

Dear All,I would like to do something verys imple with IPTABLES but i canno't find any "simple" way to achieve...iptables -t nat -A PREROUTING -i eth0 -s 10.0.0.0/24 -p tcp --dport 80 -j DNAT --to squid-box:3128The idea is to redirect any connection ...

Hi everyone, I am looking for a Cisco firewall to replace a Sonicwall NSA240 firewall in SME environment, any one have good suggestion?Thank You

Hi All,I have created a object group and a access list as given below.object-group network MOBILE_INaccess-list MOBILE extended permit ip object-group MOBILE_IN anystatic (inside,outside) x.x.x.x  access-list MOBILENow my problem is that By this conf...

Hi there,We have a site with 2x 5540 asas with SSM-20 IPS Module in active standby mode.The signatures 1204 and 1208 relating to Fragmented IP datagrams fire on traffic even when excluded from the siganture set.Any ideas why and how to fix this issue...

i have a Cisco ASA 5520 8.4(1) with a ASA 5520 VPN Plus licensei want to use the management interface as a regular interface (using the no management-only command)is this interface a Gig interface as well ?

Hi, a new antivirus software (sophos) has stopped the CSM 3.3.1 sp2 servcies probably and now I have some troubles to restart it again.But for safe procedure, how can I start a manual CSM back-up from CLI ?thanksrs

Hi:I have a question about using static NAT.I want to allow hosts on the inside interface to be able to access hosts in the dmz using their real dmz IP addresses.inside: 10.0.0.1/21security level 100dmz: 172.31.0.1/21security level 25The following co...

We have an ASA5505 were we see errors from time to time on this interface:Internal-Data0/1 I can't seem to find anyting as to what would cause this, or if its a problem.  Anyone have any ideas?  No other interfaces show the issue.Thanks,Jason

What would be the best Cisco device to have in order to fully protect a home network for unauthorized access?  I don't need an all in one device since I already have Cisco routers and switches, just need to solid secuirty device.