Network Security

Is there a way that I can monitor if a vpn tunnel is up or down? I know you can do sh cry isakmp sa or via the asdm but that does not alert me if a tunnel is up or down, or give me any historical data about the tunnel.I tried via solarwinds but it on...

HiI want to monitor the amount of traffic inside each Lan2Lan VPN-tunnel in Cisco ASA 5510, and I want to do it with MRTG or a clone.I have found that this is possible through a CISCO-IPSEC-FLOW-MONITOR-MIB. (http://www.assure24.com/product/2965-snmp...

Hi guys:I need your help, I was looking in the CISCO webpage how to load an IOS from a tftp server but i got some questions:I got the information from this webpage: http://www.cisco.com/en/US/docs/security/asa/asa84/configuration/guide/admin_trouble....

Hello,Can i see the bytes of one IPsec session using SNMP?Can i obtain a list of reason for a tunnel termination using SNMP?Regards.

HiI have two ASA 5520 Firewall. I want ACTIVE- ACTIVE state. A default  failover cable ( 3Feet)  shipment with  the Product . My Client want  Keep ASA different Seperate Network RACK which is differ 300 meter ( Two Building beside each other). So its...

I have a ASA5510 and I have a question about the speed the ports can handle, here is one port:interface Ethernet0/2 speed 100 shutdown no nameif no security-level no ip addressit's ethernet and not fastethernet so I figure it will only go to 10Mbps, ...

Hi Netpro Team,we have cisco asa 5510 where ips module is installed. i have given the event action rule as "deny", when i do this, the attacks destined to victim port 80 is getting denied and logged, but attack to victim port 0 does not show any acti...

Have a client who has decided to move from their Cisco ASA 5520 to a new Watchguard XTM820 firewall.  Worked through the config and got most of the rules moved over to the new device and working.  Running into some problems with the DMZ interface tho...

Hi,     After applying ZBF in a 891, users can not connect to internal resources after a successful VPN establishment. For testing purposes I've created only two zone-pair without using the self-zone, only LAN-to-WAN and WAN-to-LAN. In the last one I...

Our server team is  looknig to Encapsulate domain Controller (DC-to-DC) traffic inside IPSec.   Following is the list of ports that would be needed if we go with IPSec route DNS - 53/tcp, 53/udpPPTP establishment - 1723/tcpGRE, generic routing encaps...

I guess this question could apply to any traffic, but I am experiencing this issue with http proxy traffic.Traffic to/from a particular proxy service is being scanned by the IPS module. Legitimate proxy connections are being flagged in the logs with ...

Hi to ye all,I an ASA 5520 with an AIP-SSM-10 module. Blocking Host Connection has been activated on some signatures and I get the following errors in the diagrams below. I'll like to know their cause and what I can do to solve themthanks for your he...