Network Security

Hello,I'm deploying ASR1000 (also known IOS Firewall), and would like to prevent some network attacks like below with IOS Firewall. I believe there are some commands that can be configured in ASR, but i'm not sure how to use them.1) SYN Flood attack2...

While troubleshooting a TelePresence issue, I found the following in a FWSM Log (Ver 3.1(16))Nov 30 11:10:32 inhouseFW %FWSM-6-302014: Teardown TCP connection 146533671494443748    for VideoVLAN:192.168.194.220/50579 to inhouse:192.168.18.163/5060 du...

Hi,we've got a L3-real ip oob implementation.One of the roles use web login authentication and vlan change based on user role. The users are able to authenticate but the pop-up showing the session time and the logout button doesn't appear.Does The po...

Hellowe want to monitor the outside interface on virtual firewalls using idsm in promiscuous mode.can someone provide the sample config on what to be configured on 7600 chasis and idsm?if there are 20 virtual firewalls, how to monitor the outside int...

Hello Experts.We have 3 IPS that randomly lose connectivity with the management IP. We can ping the IP but no access via https or ssh during some minutes. Could this be a problem related with the IPS or with the network itself?The cpu is high sometim...

Hi guys, I really appreciate somebody could help me.I have an ASA 5520 Version 8.0(4) in my network with default inspection, suddenly many users where having RPC errors when they arrive to work and turn on their computers.The users told us that they ...

I am configuring an IPS 4260 in promiscious mode, and have a question about VLAN assignment.  Does the sensing interface need to be in the same VLAN as the switchport you are spanning?  Also does this port need to be a trunk?Also If you want to log t...

Hi, is there a fast configuration to use the ASA IPS SSM module in learn mode, other than the promiscuous mode ?In other words, how to deploy ASA IPS SSM in IPS in-line mode, but use it only as a detection system, without impacting the traffic.That c...

Hello,I've just installed a Cisco ASA 5505 firewall, with a very basic setup. Everthing works fine, except it's logging a number of unexpected 106001 messages "Inbound TCP connection denied from ..." during normal web browsing.It looks as though the ...

Hi All,Wondering if someone can post an example of dynamic destination nat?Basically I want my source - 10.104.34.0/24, dst - 10.100.55.0/24 to translate the dst - 172.21.0.0/16.Is that possible?Thanks for the help.