Network Security

Unfortunately I cannot share much of the configuration details other than that I have a ASA 5510 with 256MB RAM running 7.2(3) code.  I was troubleshooting a sharp spike in memory utilization (from 41% used to 91% used in the span of 2 hours) when I ...

All,     I have been playing with IOS IPS. I set up an event action override to block when a certain risk rating was triggered. It worked correctly as expected. Then when I changed the risk rating, in the event action override, where it shouldn't hav...

I am trying to setup SSL so I can manage my ASA via any internet browser on my network.  I am new to the cisco world, but I think I have most of it down.  When I try to log into the ASA via firefox I get:Cannot communicate securely with peer: no comm...

I have an ASA5510 (with 4 FE ports) as user VPN gateway. It's now connected to the internal LAN via Ethernet 0/0, configured as Layer 3 "inside" interface. We are building a new LAN in parallel to the existing LAN, and I'm thinking during migration, ...

Some how I turned on something that gives me a status my ASA everytime I enter a command and everytime it blocks something.  I am not sure what I did, but if you could provided some insite on how to turn it off it would be very helpfull. Below is my ...

Hi,Does anyone have a working example/design of a ASA 5520 HA setup over two geographically datacentres (E.g Active unit at Datacentre A and Standby Unit at Datacentre B) that are connected via a layer 2 link. We are running stretched vlan's between ...

This what I am trying to do... with not sucess as of yetinterface Vlan1 nameif inside security-level 100 ip address 192.168.0.1 255.255.255.0  ( LAN )!interface Vlan2 nameif outside security-level 0 ip address 1.2.2.234 255.255.255.248  ( WAN Connect...

Hi How do I verify the real license not trial version install on IPS 7?  Thanks.

Hello,I´ve just added the IDSM-2 blades on a 6500 and configured it but it did not work as I planned.This picture is a little scale what I tried to do, actually I had more vlans on the inspection.  I have 2 cores and a portchannel trunk in between th...

I have a 5520 with an AIP-SSM-40 module. I also use the same 5520 as our terminal for VPN clients and the odd thing is that the IDS actually sees our VPN clients as the top attackers? I do not tunnel the VPN clients into the inside interface either. ...

We have a SSM module in each of our ASA-5520's and they have never really been configured correctly.  Ive taken this on and am trying to learn IDS/IPS as I go.  The first problem that I am seeing is that its reporting our NMS system as a possible thr...

I currently have all my VPN clients connect to the same IP address that I use for all my outgoing traffic to the internet.  I would like my VPN clients to NOT be able to connect to the outgoing traffic IP and instead be able to connect to my new IP d...

I'm looking for a syslog server to manage my network routers, switchs and servers. I'd like the syslog server to allow easy searches and provide historical data at least 30 days. Can some recommend an industry standard syslog server?