Network Security

Hello,I´ve just added the IDSM-2 blades on a 6500 and configured it but it did not work as I planned.This picture is a little scale what I tried to do, actually I had more vlans on the inspection.  I have 2 cores and a portchannel trunk in between th...

I have a 5520 with an AIP-SSM-40 module. I also use the same 5520 as our terminal for VPN clients and the odd thing is that the IDS actually sees our VPN clients as the top attackers? I do not tunnel the VPN clients into the inside interface either. ...

We have a SSM module in each of our ASA-5520's and they have never really been configured correctly.  Ive taken this on and am trying to learn IDS/IPS as I go.  The first problem that I am seeing is that its reporting our NMS system as a possible thr...

I currently have all my VPN clients connect to the same IP address that I use for all my outgoing traffic to the internet.  I would like my VPN clients to NOT be able to connect to the outgoing traffic IP and instead be able to connect to my new IP d...

I'm looking for a syslog server to manage my network routers, switchs and servers. I'd like the syslog server to allow easy searches and provide historical data at least 30 days. Can some recommend an industry standard syslog server?

HiATT notified my company we have a virus infected pc on one our networks which sits behind a Cisco ASA 5505 running 7.2(4). The set up is a basic inside/outside NAT configuration. They gave us the destination ip address and port which the our pc is ...

Hello,I have a DMZ network and then also an internal network.I have 2 servers on my internal network that need to be accessible from the public internet.However I don't want to do a NAT and blindly open those ports up.so my thinking ispublic ip -> dm...

Hi,We have 2 pairs of FWSM, both have 4.0.8 and ASDM 6.1.5F, both are single routed. In one case, we're able to see the Hits in ASDM, in the other one not.The only difference I see is that ACL optimization is enabled in one case. Does/did anybody hav...

Dear All,My customer had a spare ASA5510 bought a few years before with 5 x FE and security plus license with HA. Now they would like to buy a new ASA5510 to configure HA with the spare one, but now the ASA5510 comes with 2GE+3FE. Can the two FW work...

I'm a little confused about doing a translation using static identitiy NAT.I have a prorietary router that I would like to move behind my firewall (ASA 8.2x). Right now it runs in parallel with my router from a DMZ switch. I have change ISPs and the ...

Hi Customers,Its summer time and nothing evokes cool quite like a discussion into the TCP / IP stack and how creative attacker types try to hide attacks behind it. This presentation will feature a security researcher from our signature team and will ...