Network Security

I tried to stop Cisco IOS from sending any ICMP unreachables. With the following config, IOS still sends an ICMP "Destination Unreachable" Communication Administratively Filtered" When I try to ping the router from over the internet, or access a bloc...

Hi,I'm trying to set up Windows Server UAG for Direct Access in a Testlab. The UAG Server has two network nics. One in my Testdomain (internal) and the other one in a DMZ of our Cisco ASA (external).Our ASA dmz has subnet 192.168.3.x but UAG Direct A...

Hi,I have encountered a problem which puzzles me.Here are my object-groups:object-group network fserve network-object host fserve-active network-object host fserve-standbyobject-group service fserve-services service-object tcp eq www service-object t...

Hi,My self Pushpendra and we have ASA 5520 with CSC-SSM 20 and we want to block https trafiic but when we are blocking https traffic http traffic going to block but user are able to open website through https.So please suggest me what we need to do.R...

HI Experts!!!!I upgraded MY ASA IOS with 8.4.2 and CSC IOS with 6.6.1125.0 . Then after HTTPS filtering fine with Firefox broswer but not with IE.In URL blocking window i configured Public IPs of some https web sites then URL blocking working with IE...

could someone further explain the following message:Error Message   %PIX-3-313001: Denied ICMP type=icmp_type, code=type_code from IP_addr on interface int_name------------------------------------------------%PIX-3-313001: Denied ICMP type=3, code=3...

Hi all,I have a problem with my IDSM-2 module. I'm trying to sensor upgrade from IDS to IPS software (from 4.1 version to 5.x or higher).If I do this from sensor under "admin user" and use major patch - IPS-K9-maj-5.0-1e-S149.rpm.pkg then I receive e...

I have a number of aip-ssm modules on a number of asa's and it's becoming very 'painful' to login to each module to check the logs.is there a tool that can capture all the logs and notify us when things go bad?

Hello,I am preparing to roll out ISP on 38 x cisco 2911 routers. I have a cisco Mars device and i intend to setup logging on the routers so the IPS traffic will be logged to cisco mars.I have cisco 2800 routers on the network but have been told that ...

Hi,I have an issue in the Cisco PIx 515e series. The IOS is 6.1(2).I have set sepecific access-list to allow incoming traffic to inside interface. But still the TCP 3-way handshaking is dropped here.302001: Built inbound TCP connection 11959955 for f...

Hi thereWhen I try to configure the Botnet Traffic filter with the commad "dynamic-filter use database" through the ASDM I get the following error message. [ERROR] dynamic-filter use-database  Dynamic Filter: New data file not terminated with newline...