Network Security

CSM has some strange entries for our policies for some contexts. This is after the contexts were discovered.On the context we have 2 groups as source but the CSM creates multiple DM_inline... objects with the same content:Here is the CSM version of i...

Hello,Quick question we have a customer with an ASA5510 they have the 2 asa/adsm bin files:asa842-k8.bin / asdm-645.binI want to double check to see if they have been tampered with. The only problem is i can't find anywhere on cisco's site that show'...

I came across an excerpt from the CCNP Security IPS Official Cert Guide at the weekend that essentially said that you can use an Etherchannel bundle as a destination port with SPAN to connect multiple sensors for a scaleable HA IDS solution. Now that...

Hi !i would like to see if this is currently possible :i have two firewalls, fwsms and/or asa .i would like to have the following configuration :fwsm/asa/other are in transparent mode [assuming that in that way they can pass Lacp]if they can pass lac...

Hi everyone,I was noticed that Cisco ASA is able to generate reports in terms of Syslog messages, NetFlow v9,but how can I schedule the appliance to create the reports on a daily/weekly/monthly basis?

Dear All,I would like to do something verys imple with IPTABLES but i canno't find any "simple" way to achieve...iptables -t nat -A PREROUTING -i eth0 -s 10.0.0.0/24 -p tcp --dport 80 -j DNAT --to squid-box:3128The idea is to redirect any connection ...

Hi everyone, I am looking for a Cisco firewall to replace a Sonicwall NSA240 firewall in SME environment, any one have good suggestion?Thank You

Hi All,I have created a object group and a access list as given below.object-group network MOBILE_INaccess-list MOBILE extended permit ip object-group MOBILE_IN anystatic (inside,outside) x.x.x.x  access-list MOBILENow my problem is that By this conf...

Hi there,We have a site with 2x 5540 asas with SSM-20 IPS Module in active standby mode.The signatures 1204 and 1208 relating to Fragmented IP datagrams fire on traffic even when excluded from the siganture set.Any ideas why and how to fix this issue...

i have a Cisco ASA 5520 8.4(1) with a ASA 5520 VPN Plus licensei want to use the management interface as a regular interface (using the no management-only command)is this interface a Gig interface as well ?

Hi, a new antivirus software (sophos) has stopped the CSM 3.3.1 sp2 servcies probably and now I have some troubles to restart it again.But for safe procedure, how can I start a manual CSM back-up from CLI ?thanksrs