Network Security

I am trying to find a signature that will tell my IPS to notify me when it sees any IP source address come from the network behind my IPS that was not in that subnet range.  Is there an existing signature I may have looked over in my IPS or has anyon...

hican someone help me with this? i have a active/standby pair of asa 5520's, i can access the active asa but not the standby asa via console,i have tried the password recovery on the standby unit but it does not work, do i need to remove the unit fro...

hi everybodyi have a broblem with my ASA 5510 (8.4(2) ), sometimes the static nat stops working , clearing the tan table , does'nt solve anything , reboot does nothong too, even if the configuration was right. whene i change the configuration , for e...

Hello!I'm configuring NAC appliance in L2 OOB Virtual gateway.Task:When users without CAA try to access the network they forfarded to web authentication. Depending on credentials provided user is assigned to guest role with appropriate VLAN or asked ...

Hello,I'm trying to configure AD SSO. There are two 2008 R2 AD servers in domain XXXX.LOCAL and I'm trying to configure AD SSO without ktpass.I've configured user NACUser on one servers in Users and performed ldp.exe configuration for this user with ...

I am trying to get my PIX at home to work with my home network.  I have right now a modem hooked into WAN port of the linksys wireless router.  I'm trying to put my PIX in between.I have hooked laptop straight into the modem to get network stats...th...

hi all,we have a internal URL, that works fine when we bypass ASA and doesn't open via ASA, I have tried the steps as adviced in the following link but issue still is same.http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_tech_note09186a...

I want to bundle two interfaces together. I configured Etherchannel on ASA. User the following procedure to configure it on VMware: http://kb.vmware.com/selfservice/microsites/search.do?cmd=displayKC&externalId=1001938My interface does not come up. I...

Hello,can anybody explain me this issue?I have ASA firewall, load-balancer ACE 4710 and some real servers connected to same vlan (dmz). Sometimes ACE lost connectivity to real server. Reason is wrong ARP record on ACE - when ACE broadcasts arp reques...

Can anyone give an example of letting traffic pass from an inside interface to the DMZ without NAT?  Now that "no nat-control" has been deprecated and you can't do a static(dmz,inside) 10.0.0.0 255.0.0.0 tyoe statement anymore, I haven't found a good...

I got the charge of a ASA 5510 running with 8.3(1) version.Found that this is simple config with Patting for inside host and couple of Static Nat for web servers and FTP server as well.There is lots of other configuration being done,I assume for the ...

Hi there,I got an asa5510. After problems with ipsec connections the log said :LU allocate xlate failedthis error repeats every minute. At the cisco site i found the following :explantion : stateful failover failed to allocate a translation (xlate) s...

Hey all, hopefully this should be a nice easy one!I remember being told a while back that ASA devices don't handle traffic very well that goes outbound out of an interface, and then comes back inbound on the same interface.  For example:- traffic lea...