Network Security

I have an ASA5510 (with 4 FE ports) as user VPN gateway. It's now connected to the internal LAN via Ethernet 0/0, configured as Layer 3 "inside" interface. We are building a new LAN in parallel to the existing LAN, and I'm thinking during migration, ...

Some how I turned on something that gives me a status my ASA everytime I enter a command and everytime it blocks something.  I am not sure what I did, but if you could provided some insite on how to turn it off it would be very helpfull. Below is my ...

Hi,Does anyone have a working example/design of a ASA 5520 HA setup over two geographically datacentres (E.g Active unit at Datacentre A and Standby Unit at Datacentre B) that are connected via a layer 2 link. We are running stretched vlan's between ...

This what I am trying to do... with not sucess as of yetinterface Vlan1 nameif inside security-level 100 ip address 192.168.0.1 255.255.255.0  ( LAN )!interface Vlan2 nameif outside security-level 0 ip address 1.2.2.234 255.255.255.248  ( WAN Connect...

Hi How do I verify the real license not trial version install on IPS 7?  Thanks.

Hello,I´ve just added the IDSM-2 blades on a 6500 and configured it but it did not work as I planned.This picture is a little scale what I tried to do, actually I had more vlans on the inspection.  I have 2 cores and a portchannel trunk in between th...

I have a 5520 with an AIP-SSM-40 module. I also use the same 5520 as our terminal for VPN clients and the odd thing is that the IDS actually sees our VPN clients as the top attackers? I do not tunnel the VPN clients into the inside interface either. ...

We have a SSM module in each of our ASA-5520's and they have never really been configured correctly.  Ive taken this on and am trying to learn IDS/IPS as I go.  The first problem that I am seeing is that its reporting our NMS system as a possible thr...

I currently have all my VPN clients connect to the same IP address that I use for all my outgoing traffic to the internet.  I would like my VPN clients to NOT be able to connect to the outgoing traffic IP and instead be able to connect to my new IP d...

I'm looking for a syslog server to manage my network routers, switchs and servers. I'd like the syslog server to allow easy searches and provide historical data at least 30 days. Can some recommend an industry standard syslog server?

HiATT notified my company we have a virus infected pc on one our networks which sits behind a Cisco ASA 5505 running 7.2(4). The set up is a basic inside/outside NAT configuration. They gave us the destination ip address and port which the our pc is ...

Hello,I have a DMZ network and then also an internal network.I have 2 servers on my internal network that need to be accessible from the public internet.However I don't want to do a NAT and blindly open those ports up.so my thinking ispublic ip -> dm...