Network Security

I've had this line 2 consective times in the log and then immediately afterwards the PIX cuts off the internet. Is it possible after so many denied ICMPs it does this? Is there some threshold the PIX reaches and then causing the internet traffic to s...

Hi All,having a very strange problem with a Cisco 1861 running - Cisco IOS Software, C1861 Software (C1861-ADVENTERPRISEK9-M), Version 12.4(24)T5The issue  -I have suddenly started to get performance issues with downloads and access through the ZBF. ...

HA Pair of 3355 CAMs, running 4.8.2 software (clean install, not upgraded from earlier version.)With temporary self-signed certificates, the HA pairing is successful (one CAM reports Ok/Active and peer Ok/Standby).  Thus, it doesn't seem like e.g., a...

i have an ASA 5520 8.4(1) setup as follows      public wan          |          |        ASA-- public dmz          |          |      private lani need to allow https traffic to a server in the DMZ that will have a routable IP addresswill just an ACL s...

Hi,I recently did an IPS-Installation and CSM-Integration at a customer, where I had the situation that I couldn't disable or modify some of the signatures via CSM. Specifically the problem occured with some signatures with signature-ids in the area ...

first:i read cisco document:http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a0080094a5a.shtml#newpptp client is in inside,pptp server is in outside.when i donot use firewall, the pptp connection can establish ...

Hye to you all,I am working on an ASA5520 with an intergrated IPS Module AIP-SSM-10. I am trying to configure the AIP-SSM-10 to communicate with the ASA5520(Cos ASA5520 is a blocking device) by typing the command: ssh host-key 42.90.224.206.but it do...

Hello Experts!I apologize if I am asking too simple question.I am puzzled with the online nmap remote scan result from our Cisco router. It shows as following:Not shown: 4996 closed portsPORT STATE SERVICE25/tcp filtered smtp1720/tcp filtered H.323/Q...

Hi,the  asa is not generating correct icmp unreachable packets for denied udp  connections, the packets will simply be droped (not rejected). For  denied tcp connections it sent a correct TCP reset packet. May it be possible to configure that correc...

We have 2 of these in active standby failover setup. Have purchased new licenses for the IPS SSM-20, will it affect the pair if I go ahead and tell them to install from cisco.com??? what is the proceedure?? where can I find it.. I have 9 days to get ...