Network Security

I have to expand firewall capacity (max session) for  ddos protectionIn my opinion, firewall is vulnerable to a session based attack ( like HTTP GET Flooding)For DDOS protection.. I consider three items1. remove the L4 in front of firewall (like fire...

Hello,I am going to order ISR 3925 with NPE IOS and NPE Security license. Will it be possible to upgrade NPE security license with Encryption support after ordering, without any charge ?

Hi,I am configuring new ASA 5520 with AIP module for our network with HA (2 boxes), can anyone guide me what would be the best practice to configure in order to protect webservers and email server.can pls give scopes in points to keep in mind before ...

Using ACS 5.2 configured for TACACS+ and using LDAP for user authentication - LDAP Bind test is good.When using LDAP for Idendity: users authenticate but do not authorize and get the default rule.When using a Local User on the ACS for Idendity: that ...

Hi all,We are facing a problem with the new NAC agent update, the current version of the agent that is running on the users PC's is 4.8.1, and a couple of days before, the new 4.8.2 update was popping up at the users screens.when the user clicks the ...

Hi forumers'my C891 router IOS is using 15.1 adipservices, which shoudl have IPS and misc security featuresmy question is1. IPS license status is not installedi able to load the IPS signature into the box. would this causing the IPS not running on my...

Hello Experts,We have around 500 computers joined under the windows domain. We are to about to planned a security initiative that any internet user in the domain will authenticate with Cisco ASA 5540. This step will be taken in order to make sure tha...

Hi everyone,I'm planning a failover ASA deployment and I'm going by this guide:  http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00807dac5f.shtmlIn the diagram for "LAN-Based Active/Stanby Failover Configurat...

Hello, I have recently migrated from CSM 3.3 to CSM 4.1 on a new server. I have everything configured and working correctly, but the thing that I am missing is how to configure E-mail alerts based on attack severity. I had this configured on the old ...

2 questions on the asa1. how do I nat a public address to a dmz address.2. how do I oopen port 80/443 in the public to this address?

hi allI am trying to setup email alert on our ASA 5520 so that i can receive emails to my exchange account below is the configurationlogging enablelogging timestamplogging buffer-size 10000logging monitor notificationslogging buffered warningslogging...