Network Security

Hello,I am sorry if I am asking a newbie question. I am trying to setup a firewall on our CISCO 2911 router. It has only 3 ports one of which is used for management only purpose. The other two ports are setup as follows:ISP|router 1 -CISCO 2911------...

Hi there,New to SIP and SIP ALG.Just wondering, what is needed to activate SIP ALG in IOS F/W 12.4(22)T?Thank you in advance.

Hi,I have a 2811 running 12.4(24)T2 with Trend Micro content filtering located in China.It is configured with both category filtering as well as local filtering.Web site load times are unreasonably slow. If I add a site to the local whitelist (so tha...

Although I am still not entirely sure that our Dynamic PAT is the root of the problem, it seems prudent to explore changing this toa static value.  I have changed this to a static object, and we seem to still have outside connectivity, which is great...

Hi I am experencing a strange thing in my NAC deployment . I have deployed  OOB L2 VGW  .Now the problem is arising on some of my client PC's for the first time when Nac agent is  installed the PC's go through every NAC process correctly but after fe...

I've been researching WCCP as a potential technology to use for a project, but I haven't quite come across the authoritative source with a list of WCCP service groups.  I've found a small list here thankfully, http://doublef.org/archives/be-transpare...

Hey guys I have a couple questions - I have two ASAs 5510 running failover (active/passive) and I want to configure priority-queue on the outside interface and when ever I try to configure it rejects my command. If I do a priority-queue ? it says ava...

Hi everybody, I have a question for the CSC experts,I want to know if the CSC Module with Trend Micro software will help me to allow my client's users to navigate only from 12h00 to 13h00,I know I could configure that and that it works, but I'll expl...

I have a customer in which we were deploying their AIP-SSM modules in their ASA's.  They have 3 sites with a VPN tunnel mesh between them.  All was working well until we attempted to upgrade their signatures to the latest version (524).  Units were r...

Hi,I am trying to manage Cisco IDS 4215 with Cisco IPS IME .  but on the CLI of IDS i get the below error. Can anyone explain what is this error and how can it be fixed?2010-10-31 12:21:43,703 [tt] WARN - mysensor eror in init() 4042010-10-31 12:21:4...

Dear all,I need to update my IPS(ASA5510-AIP-SSM) signature automatically, for this purpose i requested for suggestion&quotation from a local cisco vendor,Now they quoted 2 product numbers for the single purpose, I think only one of them should be pu...

Hello everybodyI haven't found this in official documentation and would like to ask what is best practice for managing ASA?For routers we use loopback interfaces and IPs which are routed independantly from state of physical interface. Are there anyth...

We just dropped a SAN into our dmz and I've created a new network for it for it using a different subnet. The LAN itself works independently without a problem but as I try to connect the new network to our ASA 5520's I'm running into connectivity iss...