Network Security

I have seen similar questions but with not a lot of answers for the ASA platform.As the title states, What procedures can I use to copy a pre-existing configured CISCO ASA 5520 to a brand new CISCO ASA 5520.I have found a URL that seems to answer som...

Hi,We have requirement that VPN users coming from outside the firewall need to PAT to one IP address of inside. However we have already PAT used for inside users to access outside internet. Although the VPN users PAT can be achieved, I just need to k...

I have half a dozen, late model 2800 series routers connected to 30M+ cable modem connections running recent IOS and CBAC firewall.  Very simple config.  NAT overload on the public interface of the router.  Inbound acces-list that allows ICMP traffic...

Hi All,Can I do any configuration on the ASA to dynamically disable an attackers IP address, say for 1 hour  if he/she entered 10 bad password attempts to an email  server ?Thanks,Ismail

Hola,He detectado el siguiente problema en el envio de correos.Los servidores envian un resumen de su estado por correo electronico:Los correos que se reciben tiene el siguiente con el formatoXXXXXXXX Chequeo Backups Oracle12-07-2011XXXXX soporte@mis...

The locality field in all of my IPS alerts is "OUT". I have seen a few examples on the web where the value is "IN". Is there any way to influence this value? I know you can configure an Internal Zone in the anomaly detection function, but is there so...

Hi,I am changing the configuration settings from one interface to another interface like moving DMZ interface config from ethernet to GigabitEthernet ( added module). My question, after the change, do I have to clear the arp or any other thing? Thank...

I'm looking to replace another vendor's IPS system we have at our company. We do have an ASA 5510 in our envionment currently.Considering I don't need the extra bandwidth of the IPS 4240 series and the AIP SSM-10 requires an ASA 5510 what are the dif...

Hello everyone,I have a question.I need to add more than one ip adresses in the same physical interface, without creating sub interfaces, its possible?The addresses are in the same subnet.Tks a lot.Rafael Mendes

i type "security authentication failure rate 2 log" in global configuration mode,then  login authentication failed many times but no the 15-second delay.why?Thanks.

I have just licenses our IPS Module Sensor and wanted to setup Auto/Cisco.com Update's so it checks once a day. I was able to apply the license via the update button in the Cisco ADSM interface. When the update occurs I receive a "error 19 opening lo...

Hi,I have started getting the following error message in CSM when pushing signature updates to our 4200 series and IDSM-II blades: Could not get device version after pushing down sensor update package to device The actual signature updates work fine,...